Fix omniauth authorization bugs

* fix routes
* update request phase json parsing