omniauth is really hard to test locally. scopes were not defined correctly.