Add protected page

To demonstrate the OAuth integration, a private page has been added.
Fix bug in authentication redirect path

The path contained the strategy "so", which of course has to be "chandelier".