dont request /me in login callback