Use OmniAuth for login and API session authentication