using SecureSocial for authorization and authentication