moved omniauth callback controller and added signout option