Review Environments don't auth doesn't work

oidc callback url must be exact, can't be known before deployment due to dynamic deployment urls