scaffold authentication w/ omniauth