last tentative with omniauth