oh right, because "/sign_in" !== "/sign_in?AUTH_RETURN". Took me a moment.