use field name 'image' instead, maps 1:1 w/ oauth facebook data
create user via omniauth if doesn't exist for provider + uid
fix ActiveRecord::NotFound if session[:user_id] is an old deleted User