added omniauth, started to block non-admin users. need to add more error handling and permission handling on server