I don't think the second `=~` will ever be true.  According to SO, the difference between `REQUEST_PATH` and `REQUEST_URI` is that the latter [has the domain name and the query parameters](http://stackoverflow.com/questions/1515108/whats-the-difference-between-request-envrequest-uri-and-request-envreques).  In that case, if `REQUEST_PATH` doesn't match `/auth/google_apps`, then neither should `REQUEST_URI`.  Perhaps I'm misunderstanding something?