starting to use sessions and trying to introduce OmniAuth