removed authentication check before oauth login