[refs #2] covered models and controllers but omniauth callbacks left