Update redirect_uri_validator.rb

Added comment to explain why '*' was replaced