auth callback moved back to home