require omniauth strategy