fix omniauth permissions