re-add 'bypass: true' to omniauth controller