updated oauth scope to only request email and switched oauth callback endpoint