the check to see if someone is logged in before accessing a protected page always returned as not logged in. trying to use unless @current_user ... i need to figure out a way to login with a non-oauth2 account for development, because all the callbacks require good urls.