fixed oauth login, don't create multiple users