social login callback: token & co. via cookie
ticket buying mess
adaptation of auth api path
refactorisation
credential renaming do conform passport on backend