More rigorous check on query param "code" with regex, etc
More rigorous check on query param "code" with regex, etc