Disable active_resource in dummy app
No longer available in Rails 4
Reorder SSO code to fail faster on old timestamp
Return custom 403 response code for invalid logins
Based on the kensa gem's expectations.