generally get token based on omniauth strategies