oauth is kind of working, but not logging a user in