Why do we need to create an extra method for this? Could we just add some "optional_login" or "enable_fallback" flag to SSO method and decide based on that in #authenticate whether to redirect to login_users_path?