Omniauth needs to check against all users.
assets