Remove all the trailing whitespace.
Do not allow the user arg to Provider.access_token() to be nil. If you want implicit user lookup, pass :implicit as the user. This prevents accidental authorization in cases where the application developer does not check the result of their User.find() calls.