Clip Omniauth

"logging in" via api endpoints is totally thw wrong thing to do, but my brain hurts. deal with it.