token was  hidden in params
still stuck on request.env not having omniauth