Does the code even reach the controller? Have you tried putting breakpoint on the callback controller?
On the side note, I suggest keeping the authentication profile info in the a separate class, like a Startup.cs. Would make your code non repetitive.