fix for auth callback to be called as part of the route instead of as a route by itself