require_provider_token: redirect_url should be nested (bug fixed)