add route for canvas/auth/callback