add omniauth, and make it work