I removed `isLoginPath(req.path)`. Should we keep it there so that we can redirect to `/` immediately if the user has a token and is requesting `/auth/heroku` or should we keep this lean and just have it go through the redirect loop?