Fixed session requirement in the oauth callback route.