using the latest auth0js that supports callbacks