a new approach, and oauth login is working