This is mentioned in https://developer.twitter.com/en/docs/authentication/oauth-1-0a/pin-based-oauth
The value for oauth_callback must be set to oob during the PO
