Don't require login before grant page

Even if the user hasn't authorized the app before.
Do require the user to be logged in.
Merge pull request #368 from jboning/feature/skip-grant-login

While user is logged in, don't require another login to authorize apps (even once)