extract domains from redirect URIs, fall back to client ID when that is not present