omniauth callbacks implemented; no more validate email or password