? starts the url params, which are separated by &, change the ? between the client id and callback in your request url.