reworked social auth to handle fallback better