How many login/logout callback URLs are allowed?