@ares the optional_login method calls authenticate, so this gets run.. but then we also render the extlogin page, so need to skip the redirect to the login page below.  So if we're just skipping the one line below if we're already on the login_url page.