added test for safelisting omniauth params