adding audience to the omniauth extra so we can identify the calling party