oauth authenticate and callback actions added to vendors controller