another try at omniauth routes