don't redirect again in the oauth callback. render the front page in the same request.