removed merchant.csv, fixed live request issue, use https for redirect uri