verification for #1677

Since testing omniauth_callback_controller.rb is very difficult, the logic
is moved to the models