Do not validate callback URL.

References could be found here.