cleaned up oauth callbacks controller