removed hardcoded oauth redirect url