added omniauth controller for callback