change /auth/:provider/callback to post