omniauth sign-in works for the most part