move oauth login route to config