the merging of params and the omniauth hash should be done in a service object / something that can be unit tested