ensure authentication works; also add identity support
bad implementation; but support for omniauth-identity strategy