gds-sso 13.5.0 → 13.5.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 72fc2354ba2f54ba192293b50861f8aff690edca
-  data.tar.gz: eeaa7c1c30baa2bec9190cf962dd7c83ac042d63
+  metadata.gz: 4c93fc375363a131501ac31c10e3d2cab78ac590
+  data.tar.gz: d8f3324a67ee849caa66851846350c4e57c8b60a
 SHA512:
-  metadata.gz: 149b0ebb611792c93e615537564092f9f4d5fb212f552a9b041134be095a1769643ca4e02a9ec49117dc74f2965b4ad2c53adf9c4a16574425040ed4a63edd48
-  data.tar.gz: f9f0a816379772d203bc9171ff523dd9fe2bb0918c60920879820823dad4204823048de7b9d3f78fe87a9ae5bab7b0371c1bcabc9278037628efa9a494590b46
+  metadata.gz: fb888c9c819f4500c815434abd6f9eb6e2ef0cf025148183936316e844ac7b197661efdb016e571e7be876088b6f92f9e276e7628f780e90d9c3c27e6af18497
+  data.tar.gz: 1aa7afaa32573236264b96d6cb9f83a2829c7bc632a2bb1324e570647aaf216c88303c42631a98acb0b15f288ffd27f91545deff7089fcc9c2dba493206c7e2d

data/lib/gds-sso/controller_methods.rb

@@ -44,7 +44,7 @@ module GDS
       end
 
       def require_signin_permission!
-        ActiveSupport::Deprecation.warn("require_signin_permission! is deprecated and will be removed in a future version.  The signon application checks for signin permission during oauth and it is no longer optional.", caller)
+        ActiveSupport::Deprecation.warn("require_signin_permission! is deprecated and will be removed in a future version. The signon application checks for signin permission during oauth and it is no longer optional. Note that your application will still need to call authorise_user! if it doesn't already.", caller)
         authorise_user!('signin')
       rescue PermissionDeniedException
         render "authorisations/cant_signin", layout: "unauthorised", status: :forbidden

data/lib/gds-sso/version.rb

@@ -1,5 +1,5 @@
 module GDS
   module SSO
-    VERSION = "13.5.0"
+    VERSION = "13.5.1"
   end
 end

data/spec/internal/log/test.log

@@ -1,830 +1,897 @@
-   (6.3ms)  CREATE TABLE "users" ("id" INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 'f') 
-   (5.6ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL) 
+   (8.7ms)  CREATE TABLE "users" ("id" INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 'f') 
+   (11.4ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL) 
    (0.1ms)  select sqlite_version(*)
-   (4.9ms)  CREATE UNIQUE INDEX "unique_schema_migrations" ON "schema_migrations" ("version")
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:13 +0000
-Processing by ExampleController#restricted as HTML
-Authenticating with gds_sso strategy
-Completed   in 9ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:13 +0000
-Started GET "/auth/gds/callback?code=4f80a44df83c89a482a83e9cba4bcb833aadd62e80c5882c33f4f1436e3494b3&state=d1b0b0aba6f9cda66d4c3d34106b2c9ced33efc2ba5c2594" for 127.0.0.1 at 2017-12-15 16:09:23 +0000
-Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"4f80a44df83c89a482a83e9cba4bcb833aadd62e80c5882c33f4f1436e3494b3", "state"=>"d1b0b0aba6f9cda66d4c3d34106b2c9ced33efc2ba5c2594"}
-Authenticating with gds_sso strategy
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["email", "test@example-client.com"]]
+   (5.4ms)  CREATE UNIQUE INDEX "unique_schema_migrations" ON "schema_migrations" ("version")
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "asd"]]
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["email", "user@example.com"]]
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions", "organisation_slug", "organisation_content_id", "disabled") VALUES (?, ?, ?, ?, ?, ?, ?)  [["uid", "asd"], ["email", "user@example.com"], ["name", "A Name"], ["permissions", "---\n- signin\n"], ["organisation_slug", "hmrc"], ["organisation_content_id", "67a2b78d-eee3-45b3-80e2-792e7f71cecc"], ["disabled", nil]]
+   (7.8ms)  commit transaction
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "asd"]]
+   (0.0ms)  begin transaction
+   (0.0ms)  commit transaction
+   (0.0ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d34983"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
+   (8.0ms)  commit transaction
+   (0.0ms)  begin transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d36880"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (4.2ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"a1s2d34983"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "a1s2d34983"]]
+   (0.0ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 2]]
+   (6.3ms)  commit transaction
+Completed 200 OK in 10ms (ActiveRecord: 6.6ms)
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT 1  [["id", 2]]
+   (0.1ms)  begin transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d334"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
+   (7.2ms)  commit transaction
+   (0.0ms)  begin transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d35232"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (6.2ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"a1s2d334"}
+  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.2ms)
+Completed 403 Forbidden in 12ms (Views: 11.5ms | ActiveRecord: 0.0ms)
+   (0.1ms)  begin transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d31860"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
+   (6.7ms)  commit transaction
+   (0.0ms)  begin transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d39363"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (6.3ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"nonexistent-user"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "nonexistent-user"]]
+Completed 200 OK in 1ms (ActiveRecord: 0.1ms)
    (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "integration-uid"], ["email", "test@example-client.com"], ["name", "Test User"], ["permissions", "---\n- signin\n"]]
-   (8.8ms)  commit transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d38845"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
+   (6.8ms)  commit transaction
    (0.1ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 1]]
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d31699"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
    (3.9ms)  commit transaction
-Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 40ms (ActiveRecord: 13.9ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:23 +0000
-Processing by ExampleController#restricted as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d38845"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "a1s2d38845"]]
+   (0.0ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "email" = ?, "name" = ?, "permissions" = ?, "organisation_slug" = ?, "organisation_content_id" = ? WHERE "users"."id" = ?  [["email", "user@domain.com"], ["name", "Joshua Marshall"], ["permissions", "---\n- signin\n- new permission\n"], ["organisation_slug", "justice-league"], ["organisation_content_id", "aae1319e-5788-4677-998c-f1a53af528d0"], ["id", 8]]
+   (6.2ms)  commit transaction
+Completed 200 OK in 10ms (ActiveRecord: 6.5ms)
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT 1  [["id", 8]]
+   (0.1ms)  begin transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d35812"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
+   (4.2ms)  commit transaction
+   (0.1ms)  begin transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d38211"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (7.2ms)  commit transaction
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d35812"}
+  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.1ms)
+Completed 403 Forbidden in 1ms (Views: 0.6ms | ActiveRecord: 0.0ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:15:51 +0000
+Processing by ExampleController#this_requires_signin_permission as JSON
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["email", "test@example-client.com"]]
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions", "disabled") VALUES (?, ?, ?, ?, ?)  [["uid", "integration-uid"], ["email", "test@example-client.com"], ["name", "Test User"], ["permissions", "---\n- signin\n"], ["disabled", nil]]
+   (19.3ms)  commit transaction
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+   (0.0ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 12]]
+   (7.5ms)  commit transaction
+  Rendered text template (0.0ms)
+Completed 200 OK in 340ms (Views: 3.5ms | ActiveRecord: 28.1ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:15:51 +0000
+Processing by ExampleController#restricted as JSON
+Completed   in 31ms (ActiveRecord: 0.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:15:52 +0000
+Processing by ExampleController#restricted as JSON
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+   (0.0ms)  begin transaction
+   (0.0ms)  commit transaction
   Rendered text template (0.0ms)
-Completed 200 OK in 15ms (Views: 11.7ms | ActiveRecord: 0.2ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:23 +0000
+Completed 200 OK in 71ms (Views: 0.3ms | ActiveRecord: 0.8ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:15:52 +0000
+Processing by ExampleController#restricted as JSON
+Completed   in 24ms (ActiveRecord: 0.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:15:52 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms (ActiveRecord: 0.0ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:15:52 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:23 +0000
-Started GET "/auth/gds/callback?code=b0509407a26ad64f70a3e61dcf90487d48da5077adc6b28ef328bef3e639fd62&state=a69cae8f73dfa998f2919cf542658ff12d52807b90b3f486" for 127.0.0.1 at 2017-12-15 16:09:24 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:15:52 +0000
+Started GET "/auth/gds/callback?code=403fb0d1ec97649af51d34a0885922c8cf07debe7344a56dc9aa84ee676cabc8&state=748a66d055257f50dd6e45a1ff8c850d158ba585519fedff" for 127.0.0.1 at 2018-01-23 17:16:02 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"b0509407a26ad64f70a3e61dcf90487d48da5077adc6b28ef328bef3e639fd62", "state"=>"a69cae8f73dfa998f2919cf542658ff12d52807b90b3f486"}
+  Parameters: {"code"=>"403fb0d1ec97649af51d34a0885922c8cf07debe7344a56dc9aa84ee676cabc8", "state"=>"748a66d055257f50dd6e45a1ff8c850d158ba585519fedff"}
 Authenticating with gds_sso strategy
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.3ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "disabled" = ? WHERE "users"."id" = ?  [["disabled", "f"], ["id", 12]]
+   (8.1ms)  commit transaction
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/this_requires_signin_permission
-Completed 302 Found in 4ms (ActiveRecord: 0.3ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:24 +0000
+Completed 302 Found in 14ms (ActiveRecord: 8.8ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:02 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.1ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:24 +0000
+Completed 200 OK in 3ms (Views: 0.3ms | ActiveRecord: 0.2ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:02 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:24 +0000
-Started GET "/auth/gds/callback?code=9c135c62171ce1eb65cb5a48fdc02da83105cf9f430e5187906cb27c2bf0247b&state=0e4c5282ff70a47dd538df9b452cfde6dc9431a30de2176d" for 127.0.0.1 at 2017-12-15 16:09:24 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:02 +0000
+Started GET "/auth/gds/callback?code=21ad57aeb6cbc4395aa34f175ab0f5fe4458d8ece2b7c8d4b9be155f086a475f&state=6e21c7bcb78b4b88679aef913b38e813bf4f3896e88d0a51" for 127.0.0.1 at 2018-01-23 17:16:02 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"9c135c62171ce1eb65cb5a48fdc02da83105cf9f430e5187906cb27c2bf0247b", "state"=>"0e4c5282ff70a47dd538df9b452cfde6dc9431a30de2176d"}
+  Parameters: {"code"=>"21ad57aeb6cbc4395aa34f175ab0f5fe4458d8ece2b7c8d4b9be155f086a475f", "state"=>"6e21c7bcb78b4b88679aef913b38e813bf4f3896e88d0a51"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
+   (0.1ms)  commit transaction
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/this_requires_signin_permission
 Completed 302 Found in 4ms (ActiveRecord: 0.3ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:24 +0000
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:02 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/" for 127.0.0.1 at 2017-12-15 16:09:24 +0000
+Completed 200 OK in 7ms (Views: 0.3ms | ActiveRecord: 0.1ms)
+Started GET "/" for 127.0.0.1 at 2018-01-23 17:16:02 +0000
 Processing by ExampleController#index as HTML
   Rendered text template (0.0ms)
-Completed 200 OK in 0ms (Views: 0.2ms | ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:24 +0000
+Completed 200 OK in 0ms (Views: 0.3ms | ActiveRecord: 0.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:02 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms (ActiveRecord: 0.0ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:02 +0000
+Started GET "/auth/gds/callback?code=14038c8a0248bd24984494852a5fa349e995812d4406085eb51ccfccfc37d70a&state=7ff6ab7ad0eee8ec2ac4c9dcae08ad818cc7dd89d2b93646" for 127.0.0.1 at 2018-01-23 17:16:03 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"14038c8a0248bd24984494852a5fa349e995812d4406085eb51ccfccfc37d70a", "state"=>"7ff6ab7ad0eee8ec2ac4c9dcae08ad818cc7dd89d2b93646"}
+Authenticating with gds_sso strategy
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+   (0.0ms)  begin transaction
+   (0.1ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 5ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:03 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
+  Rendered text template (0.0ms)
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.1ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:03 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:24 +0000
-Started GET "/auth/gds/callback?code=40e739c25a0c5e193653b8462bac9ba71d586e151295f8715b2add8816c83f28&state=a50ce994966e7fd7e526dceb23ea1fa72bd8a5913f02962f" for 127.0.0.1 at 2017-12-15 16:09:24 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:03 +0000
+Started GET "/auth/gds/callback?code=719d8909be67ddb269b27767dbd0749dab35455bbe20bcd26ce1cec25ddbbd5c&state=0728ab14e4d2bc82b566086d2888f124e2cc6dbad3c9852b" for 127.0.0.1 at 2018-01-23 17:16:03 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"40e739c25a0c5e193653b8462bac9ba71d586e151295f8715b2add8816c83f28", "state"=>"a50ce994966e7fd7e526dceb23ea1fa72bd8a5913f02962f"}
+  Parameters: {"code"=>"719d8909be67ddb269b27767dbd0749dab35455bbe20bcd26ce1cec25ddbbd5c", "state"=>"0728ab14e4d2bc82b566086d2888f124e2cc6dbad3c9852b"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
+   (0.1ms)  commit transaction
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:24 +0000
+Completed 302 Found in 5ms (ActiveRecord: 0.3ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:03 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:24 +0000
+Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.1ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:03 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:24 +0000
-Started GET "/auth/gds/callback?code=da612655e977b4122fd016f4d9314624cb49426b7fa8116ec8a19cc33a2b453e&state=707e035bae4fa9477196a01beb49e1e639a26fadd6d34ccb" for 127.0.0.1 at 2017-12-15 16:09:24 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:03 +0000
+Started GET "/auth/gds/callback?code=984e3293314d2b147a048b206054b4fd8de7d590793008b70fa9aad3f81bb076&state=201c99f2fcda23d198f358246cb15939ea7c82c572c00d0c" for 127.0.0.1 at 2018-01-23 17:16:03 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"da612655e977b4122fd016f4d9314624cb49426b7fa8116ec8a19cc33a2b453e", "state"=>"707e035bae4fa9477196a01beb49e1e639a26fadd6d34ccb"}
+  Parameters: {"code"=>"984e3293314d2b147a048b206054b4fd8de7d590793008b70fa9aad3f81bb076", "state"=>"201c99f2fcda23d198f358246cb15939ea7c82c572c00d0c"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
    (0.0ms)  commit transaction
    (0.0ms)  begin transaction
-   (0.2ms)  commit transaction
+   (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.5ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:24 +0000
+Completed 302 Found in 5ms (ActiveRecord: 0.3ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:03 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:24 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:03 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:24 +0000
-Started GET "/auth/gds/callback?code=1b627ca32fb093220c1c939b2ae90ff813bf70387aab0739b7880cbd4a9ddb72&state=d7027a3731e9aac599eb07dc0dcf02b490f877802f0a27ac" for 127.0.0.1 at 2017-12-15 16:09:24 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:03 +0000
+Started GET "/auth/gds/callback?code=ac8d3b4e3d11487847e594d93277b140b0dd11d5689c5d8ebbcf0c4007703256&state=8d200a74c4c26e61a5674820ba2c00143132bce4a029f582" for 127.0.0.1 at 2018-01-23 17:16:03 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"1b627ca32fb093220c1c939b2ae90ff813bf70387aab0739b7880cbd4a9ddb72", "state"=>"d7027a3731e9aac599eb07dc0dcf02b490f877802f0a27ac"}
+  Parameters: {"code"=>"ac8d3b4e3d11487847e594d93277b140b0dd11d5689c5d8ebbcf0c4007703256", "state"=>"8d200a74c4c26e61a5674820ba2c00143132bce4a029f582"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
    (0.0ms)  commit transaction
-   (0.0ms)  begin transaction
+   (0.2ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:24 +0000
+Completed 302 Found in 5ms (ActiveRecord: 0.5ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:03 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.4ms | ActiveRecord: 0.1ms)
+Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.1ms)
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["email", "test@example-client.com"]]
    (0.1ms)  begin transaction
-  SQL (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 1]]
-   (8.3ms)  commit transaction
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:25 +0000
+  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 12]]
+   (8.4ms)  commit transaction
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:03 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
 Authenticating with gds_sso strategy
 Completed   in 1ms (ActiveRecord: 0.1ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:25 +0000
-Started GET "/auth/gds/callback?code=b66e93b75a97360554a76a679589ffe48ac9e9720050071eb1ccd514308e902c&state=969dfbcb65a6e1ec6750e8d4d15e61a670d531173b21737a" for 127.0.0.1 at 2017-12-15 16:09:25 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:03 +0000
+Started GET "/auth/gds/callback?code=a42cc66b7c08714a86aa1b0fd4fe829eed275b90dd80990fde259abd6fd389c3&state=b77e7afe03bb5fe0230fee7588a9e9fd817d535c13aaf82f" for 127.0.0.1 at 2018-01-23 17:16:04 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"b66e93b75a97360554a76a679589ffe48ac9e9720050071eb1ccd514308e902c", "state"=>"969dfbcb65a6e1ec6750e8d4d15e61a670d531173b21737a"}
+  Parameters: {"code"=>"a42cc66b7c08714a86aa1b0fd4fe829eed275b90dd80990fde259abd6fd389c3", "state"=>"b77e7afe03bb5fe0230fee7588a9e9fd817d535c13aaf82f"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
    (0.0ms)  commit transaction
    (0.0ms)  begin transaction
-  SQL (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 1]]
-   (5.7ms)  commit transaction
+  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 12]]
+   (7.3ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 10ms (ActiveRecord: 6.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:25 +0000
+Completed 302 Found in 12ms (ActiveRecord: 7.8ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:04 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:25 +0000
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.1ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:04 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
-Completed   in 1ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:25 +0000
-Started GET "/auth/gds/callback?code=5dde5c8fcb16ff81ec4cc3913d96a334d0e162aa84568229b7e1313104202f68&state=18722ba5a78074e2054b0d0faa468498f780ec8b6cb8ccac" for 127.0.0.1 at 2017-12-15 16:09:25 +0000
+Completed   in 0ms (ActiveRecord: 0.0ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:04 +0000
+Started GET "/auth/gds/callback?code=ea4be227e15fee05e27f9fe3445da8a37a8505855bfe6005fea4edeaa88e45ec&state=1bcab3b054b7680473e9ab5c24b567654cb6f69bdd7cdc4a" for 127.0.0.1 at 2018-01-23 17:16:04 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"5dde5c8fcb16ff81ec4cc3913d96a334d0e162aa84568229b7e1313104202f68", "state"=>"18722ba5a78074e2054b0d0faa468498f780ec8b6cb8ccac"}
+  Parameters: {"code"=>"ea4be227e15fee05e27f9fe3445da8a37a8505855bfe6005fea4edeaa88e45ec", "state"=>"1bcab3b054b7680473e9ab5c24b567654cb6f69bdd7cdc4a"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
+   (0.1ms)  commit transaction
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:25 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:04 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:04:25 +0000
-Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
-  Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:25 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:21:04 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:25 +0000
-Started GET "/auth/gds/callback?code=5928eff4d98753c5ba322595613a83d5d292148a1e4f702d6b2d00ac1b265062&state=65d3296897aa0fa478c407f4369f6c01cea3b45cd9306b7c" for 127.0.0.1 at 2017-12-15 16:09:25 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-24 13:21:04 +0000
+Started GET "/auth/gds/callback?code=3e8cf2dec1562f532d37e19ac4ae275d02573770e2e22010542dee49e01d1386&state=b5306cfd42b8e7d546344d54f80f31484c900d753e028142" for 127.0.0.1 at 2018-01-24 13:21:04 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"5928eff4d98753c5ba322595613a83d5d292148a1e4f702d6b2d00ac1b265062", "state"=>"65d3296897aa0fa478c407f4369f6c01cea3b45cd9306b7c"}
+  Parameters: {"code"=>"3e8cf2dec1562f532d37e19ac4ae275d02573770e2e22010542dee49e01d1386", "state"=>"b5306cfd42b8e7d546344d54f80f31484c900d753e028142"}
 Authenticating with gds_sso strategy
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:25 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:21:04 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.5ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:14:25 +0000
-Processing by ExampleController#restricted as HTML
-Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-16 12:14:25 +0000
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:25 +0000
+Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.1ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:04 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:25 +0000
-Started GET "/auth/gds/callback?code=dc9a7ac922d857a23dc9f20f1ea51363071c8fe03f10faae7cc3ca2480f26684&state=cd3abf2585b6d43f71d4e23d129cfbc8f46d6951f9004ba7" for 127.0.0.1 at 2017-12-15 16:09:26 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:04 +0000
+Started GET "/auth/gds/callback?code=d229a130e1aaea3d4242bfeda50599cbd201fbeb809478a7de56fc368a7c4dcd&state=cb92bde06d95b1f03c9d5874a6e821d7a1234c7f5deec91a" for 127.0.0.1 at 2018-01-23 17:16:04 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"dc9a7ac922d857a23dc9f20f1ea51363071c8fe03f10faae7cc3ca2480f26684", "state"=>"cd3abf2585b6d43f71d4e23d129cfbc8f46d6951f9004ba7"}
+  Parameters: {"code"=>"d229a130e1aaea3d4242bfeda50599cbd201fbeb809478a7de56fc368a7c4dcd", "state"=>"cb92bde06d95b1f03c9d5874a6e821d7a1234c7f5deec91a"}
 Authenticating with gds_sso strategy
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:26 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.5ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:04 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:14:26 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:21:04 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 1ms (ActiveRecord: 0.0ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-24 13:21:04 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:04 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-16 12:14:26 +0000
-Started GET "/auth/gds/callback?code=06f87d45dc882e892c68f01ab085ab9d2d6a770e7c2b29b3771f28bac7fe5731&state=32e6673192ef85b7947ea5bcfa2fa70e666582fb5b864cfa" for 127.0.0.1 at 2017-12-16 12:14:26 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:04 +0000
+Started GET "/auth/gds/callback?code=abe7dbdab2e4f482d01a0bcbc29dd202fc1c474cc83e74c5b0eeca24e7ded0a7&state=f5f792e5354fb43000f91e015faea05b61ea865f91e2b60d" for 127.0.0.1 at 2018-01-23 17:16:05 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"06f87d45dc882e892c68f01ab085ab9d2d6a770e7c2b29b3771f28bac7fe5731", "state"=>"32e6673192ef85b7947ea5bcfa2fa70e666582fb5b864cfa"}
+  Parameters: {"code"=>"abe7dbdab2e4f482d01a0bcbc29dd202fc1c474cc83e74c5b0eeca24e7ded0a7", "state"=>"f5f792e5354fb43000f91e015faea05b61ea865f91e2b60d"}
 Authenticating with gds_sso strategy
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-   (0.0ms)  begin transaction
-   (0.1ms)  commit transaction
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+   (0.0ms)  begin transaction
+   (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:14:26 +0000
+Completed 302 Found in 5ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:05 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:26 +0000
-Processing by ExampleController#restricted as JSON
-Completed   in 27ms (ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:26 +0000
-Processing by ExampleController#restricted as JSON
-Completed   in 13ms (ActiveRecord: 0.0ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:26 +0000
-Processing by ExampleController#this_requires_signin_permission as JSON
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "disabled" = ? WHERE "users"."id" = ?  [["disabled", nil], ["id", 1]]
-   (6.1ms)  commit transaction
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
-  Rendered text template (0.0ms)
-Completed 200 OK in 78ms (Views: 0.4ms | ActiveRecord: 7.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:26 +0000
-Processing by ExampleController#restricted as JSON
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-   (0.0ms)  begin transaction
-   (0.1ms)  commit transaction
-  Rendered text template (0.0ms)
-Completed 200 OK in 67ms (Views: 0.3ms | ActiveRecord: 0.8ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:26 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:11:05 +0000
 Processing by ExampleController#restricted as HTML
-Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "asd"]]
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["email", "user@example.com"]]
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions", "organisation_slug", "organisation_content_id", "disabled") VALUES (?, ?, ?, ?, ?, ?, ?)  [["uid", "asd"], ["email", "user@example.com"], ["name", "A Name"], ["permissions", "---\n- signin\n"], ["organisation_slug", "hmrc"], ["organisation_content_id", "67a2b78d-eee3-45b3-80e2-792e7f71cecc"], ["disabled", nil]]
-   (8.8ms)  commit transaction
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "asd"]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d35816"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
-   (5.5ms)  commit transaction
-   (0.1ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d33753"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (5.0ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d35816"}
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "a1s2d35816"]]
-   (0.1ms)  begin transaction
-  SQL (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 3]]
-   (4.3ms)  commit transaction
-Completed 200 OK in 7ms (ActiveRecord: 4.6ms)
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT 1  [["id", 3]]
-   (0.1ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d34978"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
-   (4.1ms)  commit transaction
-   (0.1ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d3583"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (4.8ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"nonexistent-user"}
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "nonexistent-user"]]
-Completed 200 OK in 1ms (ActiveRecord: 0.1ms)
-   (0.1ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d38013"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
-   (4.3ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d35921"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (8.6ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d38013"}
-  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.3ms)
-Completed 403 Forbidden in 9ms (Views: 8.7ms | ActiveRecord: 0.0ms)
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d31949"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
-   (5.5ms)  commit transaction
-   (0.1ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d35382"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (4.3ms)  commit transaction
-Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d31949"}
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "a1s2d31949"]]
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "email" = ?, "name" = ?, "permissions" = ?, "organisation_slug" = ?, "organisation_content_id" = ? WHERE "users"."id" = ?  [["email", "user@domain.com"], ["name", "Joshua Marshall"], ["permissions", "---\n- signin\n- new permission\n"], ["organisation_slug", "justice-league"], ["organisation_content_id", "aae1319e-5788-4677-998c-f1a53af528d0"], ["id", 9]]
-   (6.1ms)  commit transaction
-Completed 200 OK in 10ms (ActiveRecord: 6.4ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT 1  [["id", 9]]
-   (0.1ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d31937"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
-   (4.4ms)  commit transaction
-   (0.1ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d33052"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (5.6ms)  commit transaction
-Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d31937"}
-  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.0ms)
-Completed 403 Forbidden in 1ms (Views: 0.5ms | ActiveRecord: 0.0ms)
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
+  Rendered text template (0.1ms)
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.1ms)
    (0.1ms)  DROP TABLE IF EXISTS "users"
-   (2.1ms)  SELECT sqlite_version(*)
-   (6.7ms)  CREATE TABLE "users" ("id" INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 'f')
-   (5.2ms)  CREATE TABLE "ar_internal_metadata" ("key" varchar NOT NULL PRIMARY KEY, "value" varchar, "created_at" datetime NOT NULL, "updated_at" datetime NOT NULL)
+   (0.8ms)  SELECT sqlite_version(*)
+   (9.7ms)  CREATE TABLE "users" ("id" INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 'f')
+   (7.1ms)  CREATE TABLE "ar_internal_metadata" ("key" varchar NOT NULL PRIMARY KEY, "value" varchar, "created_at" datetime NOT NULL, "updated_at" datetime NOT NULL)
   ActiveRecord::InternalMetadata Load (0.2ms)  SELECT  "ar_internal_metadata".* FROM "ar_internal_metadata" WHERE "ar_internal_metadata"."key" = ? LIMIT ?  [["key", "environment"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "ar_internal_metadata" ("key", "value", "created_at", "updated_at") VALUES (?, ?, ?, ?)  [["key", "environment"], ["value", "test"], ["created_at", "2017-12-15 16:09:34.636447"], ["updated_at", "2017-12-15 16:09:34.636447"]]
-   (6.9ms)  commit transaction
-   (5.3ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL PRIMARY KEY)
+  SQL (0.2ms)  INSERT INTO "ar_internal_metadata" ("key", "value", "created_at", "updated_at") VALUES (?, ?, ?, ?)  [["key", "environment"], ["value", "test"], ["created_at", "2018-01-23 17:16:13.649652"], ["updated_at", "2018-01-23 17:16:13.649652"]]
+   (7.3ms)  commit transaction
+   (7.1ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL PRIMARY KEY)
   ActiveRecord::InternalMetadata Load (0.2ms)  SELECT  "ar_internal_metadata".* FROM "ar_internal_metadata" WHERE "ar_internal_metadata"."key" = ? LIMIT ?  [["key", "environment"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
+   (0.1ms)  begin transaction
    (0.1ms)  commit transaction
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:35 +0000
-Processing by ExampleController#restricted as JSON
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "user@example.com"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions", "disabled") VALUES (?, ?, ?, ?, ?)  [["name", "Test User"], ["uid", "integration-uid"], ["email", "test@example-client.com"], ["permissions", "---\n- signin\n"], ["disabled", nil]]
-   (6.5ms)  commit transaction
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+  SQL (0.3ms)  INSERT INTO "users" ("name", "uid", "email", "permissions", "organisation_slug", "organisation_content_id", "disabled") VALUES (?, ?, ?, ?, ?, ?, ?)  [["name", "A Name"], ["uid", "asd"], ["email", "user@example.com"], ["permissions", "---\n- signin\n"], ["organisation_slug", "hmrc"], ["organisation_content_id", "67a2b78d-eee3-45b3-80e2-792e7f71cecc"], ["disabled", nil]]
+   (6.8ms)  commit transaction
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  commit transaction
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-  CACHE User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d37661"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (6.3ms)  commit transaction
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d33640"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (6.0ms)  commit transaction
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d37661"}
+  Rendering /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
+  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.2ms)
+Completed 403 Forbidden in 10ms (Views: 9.5ms | ActiveRecord: 0.0ms)
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d31445"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (6.6ms)  commit transaction
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d36546"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (5.2ms)  commit transaction
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d31445"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d31445"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "email" = ?, "name" = ?, "permissions" = ?, "organisation_slug" = ?, "organisation_content_id" = ? WHERE "users"."id" = ?  [["email", "user@domain.com"], ["name", "Joshua Marshall"], ["permissions", "---\n- signin\n- new permission\n"], ["organisation_slug", "justice-league"], ["organisation_content_id", "aae1319e-5788-4677-998c-f1a53af528d0"], ["id", 4]]
+   (5.5ms)  commit transaction
+Completed 200 OK in 11ms (ActiveRecord: 5.9ms)
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 4], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d35667"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (6.3ms)  commit transaction
    (0.0ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 1]]
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d37841"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (6.0ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"a1s2d35667"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d35667"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 6]]
    (5.3ms)  commit transaction
-  Rendering text template
-  Rendered text template (0.0ms)
-Completed 200 OK in 113ms (Views: 4.9ms | ActiveRecord: 14.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:35 +0000
+Completed 200 OK in 8ms (ActiveRecord: 5.7ms)
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 6], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d32079"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (6.8ms)  commit transaction
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d38719"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (6.4ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"a1s2d32079"}
+  Rendering /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
+  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.0ms)
+Completed 403 Forbidden in 1ms (Views: 0.7ms | ActiveRecord: 0.0ms)
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d3596"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (6.7ms)  commit transaction
+   (0.0ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d32221"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (6.8ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"nonexistent-user"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "nonexistent-user"], ["LIMIT", 1]]
+Completed 200 OK in 1ms (ActiveRecord: 0.1ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:14 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 6ms (ActiveRecord: 0.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:14 +0000
+Processing by ExampleController#restricted as JSON
+Completed   in 30ms (ActiveRecord: 0.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:14 +0000
 Processing by ExampleController#restricted as JSON
-Completed   in 24ms (ActiveRecord: 0.0ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:35 +0000
-Processing by ExampleController#this_requires_signin_permission as JSON
   User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions", "disabled") VALUES (?, ?, ?, ?, ?)  [["name", "Test User"], ["uid", "integration-uid"], ["email", "test@example-client.com"], ["permissions", "---\n- signin\n"], ["disabled", nil]]
+   (4.9ms)  commit transaction
+  User Load (0.8ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
   CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
+   (0.1ms)  commit transaction
   CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
+   (0.1ms)  commit transaction
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 12]]
+   (5.9ms)  commit transaction
+  Rendering text template
+  Rendered text template (0.0ms)
+Completed 200 OK in 98ms (Views: 1.7ms | ActiveRecord: 13.1ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:14 +0000
+Processing by ExampleController#this_requires_signin_permission as JSON
+  User Load (1.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+  CACHE User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.8ms)  begin transaction
+   (0.1ms)  commit transaction
   CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
+   (0.1ms)  commit transaction
+  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 66ms (Views: 0.3ms | ActiveRecord: 0.7ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:35 +0000
+Completed 200 OK in 78ms (Views: 0.7ms | ActiveRecord: 2.3ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:14 +0000
 Processing by ExampleController#restricted as JSON
-Completed   in 13ms (ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:35 +0000
+Completed   in 17ms (ActiveRecord: 0.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:14 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:35 +0000
-Started GET "/auth/gds/callback?code=1ba38071ddacbdff259c5fd1bb2977edf6a64af3fbd4c6717401120fd4562eca&state=39247b0788e47d8c1787a5b738fc2048a3b12758cbc0fe16" for 127.0.0.1 at 2017-12-15 16:09:35 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:14 +0000
+Started GET "/auth/gds/callback?code=91daf7112fcf8d0313f0a45c1bba7a15715b8ca70e0b780694248a9e2bde5f89&state=25eddc4fde2d37ad90157fbb959c73947dc2cf1e364d453e" for 127.0.0.1 at 2018-01-23 17:16:14 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"1ba38071ddacbdff259c5fd1bb2977edf6a64af3fbd4c6717401120fd4562eca", "state"=>"39247b0788e47d8c1787a5b738fc2048a3b12758cbc0fe16"}
+  Parameters: {"code"=>"91daf7112fcf8d0313f0a45c1bba7a15715b8ca70e0b780694248a9e2bde5f89", "state"=>"25eddc4fde2d37ad90157fbb959c73947dc2cf1e364d453e"}
 Authenticating with gds_sso strategy
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "disabled" = ? WHERE "users"."id" = ?  [["disabled", "f"], ["id", 1]]
-   (11.0ms)  commit transaction
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "disabled" = ? WHERE "users"."id" = ?  [["disabled", "f"], ["id", 12]]
+   (7.3ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 15ms (ActiveRecord: 11.5ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:35 +0000
+Completed 302 Found in 12ms (ActiveRecord: 7.8ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:14 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 3ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:35 +0000
+Completed 200 OK in 2ms (Views: 0.4ms | ActiveRecord: 0.2ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:14 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:35 +0000
-Started GET "/auth/gds/callback?code=ccaea01fa977631f0bfb82c925d9abb718383aac1468180ac0e9d59a611650c7&state=67c3e9ff0a01575e3ef1b863f48f462bc7f28bf265a79750" for 127.0.0.1 at 2017-12-15 16:09:35 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:14 +0000
+Started GET "/auth/gds/callback?code=0b04d8c48e5fd2478fb8b3af84309f559c1ad05d1b1c21a11b833ce1593c6e39&state=e96239537c0c2f74d1dc27e2afb4bae334eaacb43215638c" for 127.0.0.1 at 2018-01-23 17:16:14 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"ccaea01fa977631f0bfb82c925d9abb718383aac1468180ac0e9d59a611650c7", "state"=>"67c3e9ff0a01575e3ef1b863f48f462bc7f28bf265a79750"}
+  Parameters: {"code"=>"0b04d8c48e5fd2478fb8b3af84309f559c1ad05d1b1c21a11b833ce1593c6e39", "state"=>"e96239537c0c2f74d1dc27e2afb4bae334eaacb43215638c"}
 Authenticating with gds_sso strategy
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/this_requires_signin_permission
-Completed 302 Found in 3ms (ActiveRecord: 0.3ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:35 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:15 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:35 +0000
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:15 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:35 +0000
-Started GET "/auth/gds/callback?code=bef57638b02fb5233c89804d8656e9a6beaedd230d4ac9349e69b485e4bfaf43&state=b64214ec4d148694013b1216624979d53401a6f9505ec065" for 127.0.0.1 at 2017-12-15 16:09:36 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:15 +0000
+Started GET "/auth/gds/callback?code=6c400a531253b352933fa50caceeedd633c1a374f09dd76a3105e407f0e4446c&state=765e268bd9ca801419b7e71627eabed18c4ce8aa5c238e8e" for 127.0.0.1 at 2018-01-23 17:16:15 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"bef57638b02fb5233c89804d8656e9a6beaedd230d4ac9349e69b485e4bfaf43", "state"=>"b64214ec4d148694013b1216624979d53401a6f9505ec065"}
+  Parameters: {"code"=>"6c400a531253b352933fa50caceeedd633c1a374f09dd76a3105e407f0e4446c", "state"=>"765e268bd9ca801419b7e71627eabed18c4ce8aa5c238e8e"}
 Authenticating with gds_sso strategy
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
+   (0.1ms)  commit transaction
 Redirected to http://www.example-client.com/this_requires_signin_permission
-Completed 302 Found in 3ms (ActiveRecord: 0.4ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:36 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:15 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:36 +0000
-Processing by ExampleController#restricted as HTML
-Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:36 +0000
-Started GET "/auth/gds/callback?code=43e57b005e25581ba8b5b77fbe305148e69a5be89adba8a356e662bd2bfb0f04&state=339c072e72a4c1f96ce29b65555b1060c37a35b801fa675d" for 127.0.0.1 at 2017-12-15 16:09:36 +0000
-Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"43e57b005e25581ba8b5b77fbe305148e69a5be89adba8a356e662bd2bfb0f04", "state"=>"339c072e72a4c1f96ce29b65555b1060c37a35b801fa675d"}
-Authenticating with gds_sso strategy
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 3ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:36 +0000
-Processing by ExampleController#restricted as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
+Started GET "/" for 127.0.0.1 at 2018-01-23 17:16:15 +0000
+Processing by ExampleController#index as HTML
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:36 +0000
+Completed 200 OK in 1ms (Views: 0.4ms | ActiveRecord: 0.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:15 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:36 +0000
-Started GET "/auth/gds/callback?code=c36da73b802e7a03f1e59958036024e418782af0bfebce3ba8da83e4064bb479&state=e58c4de8c2e1a4f755efb5f0bcf96c4938c987c2307ba993" for 127.0.0.1 at 2017-12-15 16:09:36 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:15 +0000
+Started GET "/auth/gds/callback?code=03cb21cbed6480c2234f288bf81895fa754edaa6f48304ce92a28a156cc59e7b&state=195c2aef60ededea8d73dc1bea20607b63353f07897956b4" for 127.0.0.1 at 2018-01-23 17:16:15 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"c36da73b802e7a03f1e59958036024e418782af0bfebce3ba8da83e4064bb479", "state"=>"e58c4de8c2e1a4f755efb5f0bcf96c4938c987c2307ba993"}
+  Parameters: {"code"=>"03cb21cbed6480c2234f288bf81895fa754edaa6f48304ce92a28a156cc59e7b", "state"=>"195c2aef60ededea8d73dc1bea20607b63353f07897956b4"}
 Authenticating with gds_sso strategy
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+  User Load (0.4ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
    (0.1ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 3ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:36 +0000
+Completed 302 Found in 5ms (ActiveRecord: 0.6ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:15 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
-  Rendering text template
-  Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/" for 127.0.0.1 at 2017-12-15 16:09:36 +0000
-Processing by ExampleController#index as HTML
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 0ms (Views: 0.3ms | ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:36 +0000
+Completed 200 OK in 3ms (Views: 0.5ms | ActiveRecord: 0.3ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:15 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:36 +0000
-Started GET "/auth/gds/callback?code=096a30aa0b89bf9b736679b124ec9aecdb8e1a1f39a0da483bf78c75c3543bba&state=30403080f30b937d633a85acb57d584ef470ea2cee9b0e09" for 127.0.0.1 at 2017-12-15 16:09:36 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:15 +0000
+Started GET "/auth/gds/callback?code=30de01255a24d9dec3c93fadca99af449ed43e3949c83a6573c6ce1004a4fabe&state=a961609be14f7135eac870b4666dcb6201861f463104fc62" for 127.0.0.1 at 2018-01-23 17:16:15 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"096a30aa0b89bf9b736679b124ec9aecdb8e1a1f39a0da483bf78c75c3543bba", "state"=>"30403080f30b937d633a85acb57d584ef470ea2cee9b0e09"}
+  Parameters: {"code"=>"30de01255a24d9dec3c93fadca99af449ed43e3949c83a6573c6ce1004a4fabe", "state"=>"a961609be14f7135eac870b4666dcb6201861f463104fc62"}
 Authenticating with gds_sso strategy
   User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
+   (0.1ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 3ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:36 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:15 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 1]]
-   (4.8ms)  commit transaction
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:36 +0000
+Completed 200 OK in 2ms (Views: 0.4ms | ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:15 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
 Authenticating with gds_sso strategy
-Completed   in 1ms (ActiveRecord: 0.2ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:36 +0000
-Started GET "/auth/gds/callback?code=8edc36d687b4940f3689ce49179a331b48ee586989a3831d3ee7929b34c8a412&state=0fae0ce9aec6e5816ac3957c57ec0d8f547d8dc32ee486a5" for 127.0.0.1 at 2017-12-15 16:09:37 +0000
+Completed   in 0ms (ActiveRecord: 0.0ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:15 +0000
+Started GET "/auth/gds/callback?code=5e58bbe491f1453c00b63f73929b9c6531f82b91ef0e78b1dc660add49949cae&state=b87c0dbadc989a86f5582926f0a94eebf6ea7bedcc2e53bd" for 127.0.0.1 at 2018-01-23 17:16:15 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"8edc36d687b4940f3689ce49179a331b48ee586989a3831d3ee7929b34c8a412", "state"=>"0fae0ce9aec6e5816ac3957c57ec0d8f547d8dc32ee486a5"}
+  Parameters: {"code"=>"5e58bbe491f1453c00b63f73929b9c6531f82b91ef0e78b1dc660add49949cae", "state"=>"b87c0dbadc989a86f5582926f0a94eebf6ea7bedcc2e53bd"}
 Authenticating with gds_sso strategy
-  User Load (0.4ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 1]]
-   (6.0ms)  commit transaction
+   (0.1ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 11ms (ActiveRecord: 6.7ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:37 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:16 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:37 +0000
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.3ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:21:16 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:37 +0000
-Started GET "/auth/gds/callback?code=6ba4e5600dcac666b60e0c9de5fbc443202f11e62f8c7de69f25c931f9c3318f&state=b40dddcd19cffbcb1947c22e13f49dea44ae7ce71067baf5" for 127.0.0.1 at 2017-12-15 16:09:37 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-24 13:21:16 +0000
+Started GET "/auth/gds/callback?code=77dd6a06bbc303a6203f8f87605ab5550216feae3c53db93960f2c8a5448847c&state=0a2a8378d8b0427ed04653829c9005e0ed93009063b46bcf" for 127.0.0.1 at 2018-01-24 13:21:16 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"6ba4e5600dcac666b60e0c9de5fbc443202f11e62f8c7de69f25c931f9c3318f", "state"=>"b40dddcd19cffbcb1947c22e13f49dea44ae7ce71067baf5"}
+  Parameters: {"code"=>"77dd6a06bbc303a6203f8f87605ab5550216feae3c53db93960f2c8a5448847c", "state"=>"0a2a8378d8b0427ed04653829c9005e0ed93009063b46bcf"}
 Authenticating with gds_sso strategy
   User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
    (0.1ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
 Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:37 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:21:16 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
+  User Load (0.4ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
-  Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:14:37 +0000
+  Rendered text template (0.1ms)
+Completed 200 OK in 2ms (Views: 0.4ms | ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:16 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-16 12:14:37 +0000
-Started GET "/auth/gds/callback?code=21b59850ee990845595f47d69e9a4672e23604a023adcc161b49fa74b011ac95&state=5ae04938795f7a2901515203465b900778ee2dfc5292a5ba" for 127.0.0.1 at 2017-12-16 12:14:37 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:16 +0000
+Started GET "/auth/gds/callback?code=a998f94940f771e0e8e770236512a193763b529e98175513922a2b0bee22bd0b&state=3d00f54c2828456a0e02470c06fdcdf7d697ad6537fb85ca" for 127.0.0.1 at 2018-01-23 17:16:16 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"21b59850ee990845595f47d69e9a4672e23604a023adcc161b49fa74b011ac95", "state"=>"5ae04938795f7a2901515203465b900778ee2dfc5292a5ba"}
+  Parameters: {"code"=>"a998f94940f771e0e8e770236512a193763b529e98175513922a2b0bee22bd0b", "state"=>"3d00f54c2828456a0e02470c06fdcdf7d697ad6537fb85ca"}
 Authenticating with gds_sso strategy
   User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
    (0.1ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 3ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:14:37 +0000
+Completed 302 Found in 5ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:16 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:37 +0000
+Completed 200 OK in 2ms (Views: 0.4ms | ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:11:16 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
+  Rendering text template
+  Rendered text template (0.0ms)
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:16 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:37 +0000
-Started GET "/auth/gds/callback?code=5904026c8b2858a6dfe0567d917189af96b7401eed3c3efe5b2e2d522d5b20ac&state=6fa899e2e5cc68307115dc5015bdf8ee0c2b15313d0ee4aa" for 127.0.0.1 at 2017-12-15 16:09:37 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:16 +0000
+Started GET "/auth/gds/callback?code=e6b16c97c606e602c06aae707e5b94f217b33c6e2d3e883a8af27398f79668a3&state=42dcc37ebdbf81b486a19ccc8aa43a42417419ba00b188e0" for 127.0.0.1 at 2018-01-23 17:16:16 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"5904026c8b2858a6dfe0567d917189af96b7401eed3c3efe5b2e2d522d5b20ac", "state"=>"6fa899e2e5cc68307115dc5015bdf8ee0c2b15313d0ee4aa"}
+  Parameters: {"code"=>"e6b16c97c606e602c06aae707e5b94f217b33c6e2d3e883a8af27398f79668a3", "state"=>"42dcc37ebdbf81b486a19ccc8aa43a42417419ba00b188e0"}
 Authenticating with gds_sso strategy
   User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-   (0.2ms)  commit transaction
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.5ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:37 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:16 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:14:37 +0000
+Completed 200 OK in 2ms (Views: 0.6ms | ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:21:16 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 1ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-16 12:14:37 +0000
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:37 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-24 13:21:16 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:16 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:37 +0000
-Started GET "/auth/gds/callback?code=d1e1de175198c79a78ebe88d5defd1a55ebe7a701b27d25c6f50c84b9ba67233&state=6aa589bd4ed51790803be77e60ee88b913073b9c9e007582" for 127.0.0.1 at 2017-12-15 16:09:37 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:16 +0000
+Started GET "/auth/gds/callback?code=a98605620a3252b49f52d649c68b378e9e08d0c747776b1ae0385e6411078a9f&state=782377e72efdbe0c2b66c925440a3fc5eaf03e9a1f834ae6" for 127.0.0.1 at 2018-01-23 17:16:16 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"d1e1de175198c79a78ebe88d5defd1a55ebe7a701b27d25c6f50c84b9ba67233", "state"=>"6aa589bd4ed51790803be77e60ee88b913073b9c9e007582"}
+  Parameters: {"code"=>"a98605620a3252b49f52d649c68b378e9e08d0c747776b1ae0385e6411078a9f", "state"=>"782377e72efdbe0c2b66c925440a3fc5eaf03e9a1f834ae6"}
 Authenticating with gds_sso strategy
   User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
+   (0.1ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 3ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:37 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:16 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:04:37 +0000
+Completed 200 OK in 2ms (Views: 0.4ms | ActiveRecord: 0.2ms)
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
+   (0.0ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 12]]
+   (7.8ms)  commit transaction
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:16 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
-  Rendering text template
-  Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:37 +0000
-Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms)
+Completed   in 1ms (ActiveRecord: 0.2ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:16 +0000
+Started GET "/auth/gds/callback?code=a18d19dff286b1c94f19fe6899efa48d54cd7b0d86696af5158053a036d223fd&state=401b15a073056d265aae12704df93015d82a0094f29d6f8a" for 127.0.0.1 at 2018-01-23 17:16:17 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"a18d19dff286b1c94f19fe6899efa48d54cd7b0d86696af5158053a036d223fd", "state"=>"401b15a073056d265aae12704df93015d82a0094f29d6f8a"}
+Authenticating with gds_sso strategy
+  User Load (0.4ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d31567"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (6.7ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d31266"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (4.8ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"nonexistent-user"}
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "nonexistent-user"], ["LIMIT", 1]]
-Completed 200 OK in 1ms (ActiveRecord: 0.2ms)
+   (0.1ms)  commit transaction
    (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d317"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (4.3ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d31414"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (5.0ms)  commit transaction
+  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 12]]
+   (7.8ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 14ms (ActiveRecord: 8.6ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:17 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
+  Rendering text template
+  Rendered text template (0.0ms)
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.3ms)
+   (6.4ms)  CREATE TABLE "users" ("id" INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 'f') 
+   (6.6ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL) 
+   (0.1ms)  select sqlite_version(*)
+   (6.7ms)  CREATE UNIQUE INDEX "unique_schema_migrations" ON "schema_migrations" ("version")
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "asd"]]
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["email", "user@example.com"]]
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions", "organisation_slug", "organisation_content_id", "disabled") VALUES (?, ?, ?, ?, ?, ?, ?)  [["uid", "asd"], ["email", "user@example.com"], ["name", "A Name"], ["permissions", "---\n- signin\n"], ["organisation_slug", "hmrc"], ["organisation_content_id", "67a2b78d-eee3-45b3-80e2-792e7f71cecc"], ["disabled", nil]]
+   (5.9ms)  commit transaction
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "asd"]]
+   (0.0ms)  begin transaction
+   (0.0ms)  commit transaction
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d3205"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
+   (6.5ms)  commit transaction
+   (0.0ms)  begin transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d3478"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (6.5ms)  commit transaction
 Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d317"}
-  Rendering /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
+  Parameters: {"uid"=>"a1s2d3205"}
   Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.2ms)
-Completed 403 Forbidden in 8ms (Views: 7.8ms | ActiveRecord: 0.0ms)
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d35677"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (7.5ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d32622"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (4.5ms)  commit transaction
+Completed 403 Forbidden in 13ms (Views: 12.9ms | ActiveRecord: 0.0ms)
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d32498"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
+   (5.7ms)  commit transaction
+   (0.1ms)  begin transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d36256"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (5.2ms)  commit transaction
 Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d35677"}
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d35677"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 6]]
-   (4.5ms)  commit transaction
-Completed 200 OK in 7ms (ActiveRecord: 4.8ms)
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 6], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d32600"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (3.9ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d32756"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (3.8ms)  commit transaction
+  Parameters: {"uid"=>"a1s2d32498"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "a1s2d32498"]]
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 4]]
+   (7.7ms)  commit transaction
+Completed 200 OK in 11ms (ActiveRecord: 8.1ms)
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT 1  [["id", 4]]
+   (0.1ms)  begin transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d31373"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
+   (5.6ms)  commit transaction
+   (0.1ms)  begin transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d32429"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (6.9ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"nonexistent-user"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "nonexistent-user"]]
+Completed 200 OK in 1ms (ActiveRecord: 0.1ms)
+   (0.1ms)  begin transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d33259"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
+   (6.2ms)  commit transaction
+   (0.1ms)  begin transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d34602"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (5.7ms)  commit transaction
 Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d32600"}
-  Rendering /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
+  Parameters: {"uid"=>"a1s2d33259"}
   Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.0ms)
-Completed 403 Forbidden in 1ms (Views: 0.7ms | ActiveRecord: 0.0ms)
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d38405"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (5.1ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d3545"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (4.1ms)  commit transaction
+Completed 403 Forbidden in 1ms (Views: 0.5ms | ActiveRecord: 0.0ms)
+   (0.1ms)  begin transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d39976"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
+   (14.2ms)  commit transaction
+   (0.1ms)  begin transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d37304"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (6.5ms)  commit transaction
 Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d38405"}
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d38405"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "email" = ?, "name" = ?, "permissions" = ?, "organisation_slug" = ?, "organisation_content_id" = ? WHERE "users"."id" = ?  [["email", "user@domain.com"], ["name", "Joshua Marshall"], ["permissions", "---\n- signin\n- new permission\n"], ["organisation_slug", "justice-league"], ["organisation_content_id", "aae1319e-5788-4677-998c-f1a53af528d0"], ["id", 10]]
-   (4.4ms)  commit transaction
-Completed 200 OK in 7ms (ActiveRecord: 4.7ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 10], ["LIMIT", 1]]
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "user@example.com"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions", "organisation_slug", "organisation_content_id", "disabled") VALUES (?, ?, ?, ?, ?, ?, ?)  [["name", "A Name"], ["uid", "asd"], ["email", "user@example.com"], ["permissions", "---\n- signin\n"], ["organisation_slug", "hmrc"], ["organisation_content_id", "67a2b78d-eee3-45b3-80e2-792e7f71cecc"], ["disabled", nil]]
-   (8.3ms)  commit transaction
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-   (5.2ms)  CREATE TABLE "users" ("id" INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 'f') 
-   (5.3ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL) 
-   (0.1ms)  select sqlite_version(*)
-   (8.6ms)  CREATE UNIQUE INDEX "unique_schema_migrations" ON "schema_migrations" ("version")
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:46 +0000
+  Parameters: {"uid"=>"a1s2d39976"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "a1s2d39976"]]
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "email" = ?, "name" = ?, "permissions" = ?, "organisation_slug" = ?, "organisation_content_id" = ? WHERE "users"."id" = ?  [["email", "user@domain.com"], ["name", "Joshua Marshall"], ["permissions", "---\n- signin\n- new permission\n"], ["organisation_slug", "justice-league"], ["organisation_content_id", "aae1319e-5788-4677-998c-f1a53af528d0"], ["id", 10]]
+   (5.2ms)  commit transaction
+Completed 200 OK in 9ms (ActiveRecord: 5.5ms)
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT 1  [["id", 10]]
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:23 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 9ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:46 +0000
-Started GET "/auth/gds/callback?code=314a7afc535b27c14b581fa2e556f17d0aeacc9618fdafb53831ca9c19446d96&state=8f25865ec1fc2f2c34e2bdd3cafd9050b2c8af6b3ea5abfe" for 127.0.0.1 at 2017-12-15 16:09:46 +0000
-Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"314a7afc535b27c14b581fa2e556f17d0aeacc9618fdafb53831ca9c19446d96", "state"=>"8f25865ec1fc2f2c34e2bdd3cafd9050b2c8af6b3ea5abfe"}
-Authenticating with gds_sso strategy
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:23 +0000
+Processing by ExampleController#restricted as JSON
+Completed   in 29ms (ActiveRecord: 0.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:23 +0000
+Processing by ExampleController#restricted as JSON
+Completed   in 13ms (ActiveRecord: 0.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:23 +0000
+Processing by ExampleController#restricted as JSON
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["email", "test@example-client.com"]]
+   (0.1ms)  begin transaction
+  SQL (0.3ms)  INSERT INTO "users" ("uid", "email", "name", "permissions", "disabled") VALUES (?, ?, ?, ?, ?)  [["uid", "integration-uid"], ["email", "test@example-client.com"], ["name", "Test User"], ["permissions", "---\n- signin\n"], ["disabled", nil]]
+   (7.2ms)  commit transaction
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["email", "test@example-client.com"]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "integration-uid"], ["email", "test@example-client.com"], ["name", "Test User"], ["permissions", "---\n- signin\n"]]
-   (4.9ms)  commit transaction
+   (0.1ms)  commit transaction
+  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
    (0.0ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 1]]
-   (4.0ms)  commit transaction
-Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 36ms (ActiveRecord: 10.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:46 +0000
-Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
+  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 12]]
+   (7.0ms)  commit transaction
   Rendered text template (0.0ms)
-Completed 200 OK in 11ms (Views: 8.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:46 +0000
-Processing by ExampleController#restricted as HTML
-Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:46 +0000
-Started GET "/auth/gds/callback?code=f7d827163bfc683f21e4b914013d9afb11538bd236218206b2174df826211c7e&state=215e265d6f90d6985a3ece21e99943bf6ec7137b95b4534d" for 127.0.0.1 at 2017-12-15 16:09:46 +0000
-Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"f7d827163bfc683f21e4b914013d9afb11538bd236218206b2174df826211c7e", "state"=>"215e265d6f90d6985a3ece21e99943bf6ec7137b95b4534d"}
-Authenticating with gds_sso strategy
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+Completed 200 OK in 92ms (Views: 3.5ms | ActiveRecord: 15.5ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:23 +0000
+Processing by ExampleController#this_requires_signin_permission as JSON
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
    (0.0ms)  commit transaction
+  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
    (0.1ms)  begin transaction
    (0.0ms)  commit transaction
-Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:46 +0000
-Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
-  Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.1ms)
-Started GET "/" for 127.0.0.1 at 2017-12-15 16:09:46 +0000
-Processing by ExampleController#index as HTML
   Rendered text template (0.0ms)
-Completed 200 OK in 0ms (Views: 0.2ms | ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:46 +0000
+Completed 200 OK in 78ms (Views: 0.3ms | ActiveRecord: 0.8ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:23 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:46 +0000
-Started GET "/auth/gds/callback?code=a9df46a8e9032d2ce98fa642c6d4eecaf6d257e63fd9e94460f97dce3d68b51b&state=ce4d0f9f4a4c043b827ef8e17fb72ef23fc4119de764cc21" for 127.0.0.1 at 2017-12-15 16:09:46 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:23 +0000
+Started GET "/auth/gds/callback?code=b43e7720850448d58a0fbb16aac9abbba5555d3dc9ba571fbda9193081f96be3&state=e90e55268e547d927b1656d5c1f7994019f4106e97e80bf6" for 127.0.0.1 at 2018-01-23 17:16:23 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"a9df46a8e9032d2ce98fa642c6d4eecaf6d257e63fd9e94460f97dce3d68b51b", "state"=>"ce4d0f9f4a4c043b827ef8e17fb72ef23fc4119de764cc21"}
+  Parameters: {"code"=>"b43e7720850448d58a0fbb16aac9abbba5555d3dc9ba571fbda9193081f96be3", "state"=>"e90e55268e547d927b1656d5c1f7994019f4106e97e80bf6"}
 Authenticating with gds_sso strategy
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "disabled" = ? WHERE "users"."id" = ?  [["disabled", "f"], ["id", 12]]
+   (6.4ms)  commit transaction
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:46 +0000
+Completed 302 Found in 11ms (ActiveRecord: 7.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:23 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.1ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:46 +0000
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:23 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:46 +0000
-Started GET "/auth/gds/callback?code=bbfbf6f992e10dc4e8fcfc8260483cf3e518592aed6b2a86ca6f0aab302251a3&state=5b1490b2c12e2256d5641916db6c868cf5e16fb855757210" for 127.0.0.1 at 2017-12-15 16:09:46 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:23 +0000
+Started GET "/auth/gds/callback?code=ad28c5b212a5014bde668312daed640902e06e87740bf9a670c455ddf0477f06&state=561135a89d12e6ef7b7dfa8068535ce6d3c2b1d016d05d9e" for 127.0.0.1 at 2018-01-23 17:16:23 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"bbfbf6f992e10dc4e8fcfc8260483cf3e518592aed6b2a86ca6f0aab302251a3", "state"=>"5b1490b2c12e2256d5641916db6c868cf5e16fb855757210"}
+  Parameters: {"code"=>"ad28c5b212a5014bde668312daed640902e06e87740bf9a670c455ddf0477f06", "state"=>"561135a89d12e6ef7b7dfa8068535ce6d3c2b1d016d05d9e"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
@@ -833,529 +900,357 @@ Authenticating with gds_sso strategy
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/this_requires_signin_permission
 Completed 302 Found in 4ms (ActiveRecord: 0.3ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:46 +0000
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:23 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
 Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.1ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:46 +0000
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:23 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:46 +0000
-Started GET "/auth/gds/callback?code=8f42a16ddcb1c1b952bdfc7a288e1643b0900b8b83830a160d9edf31666fed2a&state=96dcc68ee399724a6d2e0e2fa29d355772b8d4e322654295" for 127.0.0.1 at 2017-12-15 16:09:47 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:23 +0000
+Started GET "/auth/gds/callback?code=b8c4461438a6303cb6035a09e95123bba1b6657ec8341f7570a58663d6054196&state=5b690f193aa68e0ebf417044e31701552852f065af2974df" for 127.0.0.1 at 2018-01-23 17:16:24 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"8f42a16ddcb1c1b952bdfc7a288e1643b0900b8b83830a160d9edf31666fed2a", "state"=>"96dcc68ee399724a6d2e0e2fa29d355772b8d4e322654295"}
+  Parameters: {"code"=>"b8c4461438a6303cb6035a09e95123bba1b6657ec8341f7570a58663d6054196", "state"=>"5b690f193aa68e0ebf417044e31701552852f065af2974df"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+   (0.0ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/this_requires_signin_permission
-Completed 302 Found in 5ms (ActiveRecord: 0.3ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:47 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:24 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.4ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:47 +0000
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.1ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:24 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:47 +0000
-Started GET "/auth/gds/callback?code=d2f73fcb4c577182e6ded2069bc29eb48bff0f0c9e0def1a4279403901f5d0e1&state=2ea5afbb8592f24a867a331da563a5b2c03ab839b74f7976" for 127.0.0.1 at 2017-12-15 16:09:47 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:24 +0000
+Started GET "/auth/gds/callback?code=975e5f50712651ecbef9c61594d6754bdd527da25fd8be5631e207c984cb2ccc&state=1aac7d835f566e4fb96f4f33527a0279f5481ebd839014c0" for 127.0.0.1 at 2018-01-23 17:16:24 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"d2f73fcb4c577182e6ded2069bc29eb48bff0f0c9e0def1a4279403901f5d0e1", "state"=>"2ea5afbb8592f24a867a331da563a5b2c03ab839b74f7976"}
+  Parameters: {"code"=>"975e5f50712651ecbef9c61594d6754bdd527da25fd8be5631e207c984cb2ccc", "state"=>"1aac7d835f566e4fb96f4f33527a0279f5481ebd839014c0"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
    (0.0ms)  commit transaction
-   (0.1ms)  begin transaction
+   (0.0ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:47 +0000
+Completed 302 Found in 5ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:24 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:14:47 +0000
-Processing by ExampleController#restricted as HTML
-Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-16 12:14:47 +0000
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:47 +0000
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.1ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:24 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:47 +0000
-Started GET "/auth/gds/callback?code=9645020da3d903b61bf9bb38954ca2569261f6e1fa22dcec1df95770c498ddde&state=fcf92a28d77a258572166828132a64776f92f8994eced34d" for 127.0.0.1 at 2017-12-15 16:09:47 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:24 +0000
+Started GET "/auth/gds/callback?code=202556d7dc2f8b9066383e72bbd74a55602cd697827d37c2e4fa62ad11ff1268&state=e71db924cb8cfbb0fa3ac7ebbd10377082e80ea49afa24a9" for 127.0.0.1 at 2018-01-23 17:16:24 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"9645020da3d903b61bf9bb38954ca2569261f6e1fa22dcec1df95770c498ddde", "state"=>"fcf92a28d77a258572166828132a64776f92f8994eced34d"}
+  Parameters: {"code"=>"202556d7dc2f8b9066383e72bbd74a55602cd697827d37c2e4fa62ad11ff1268", "state"=>"e71db924cb8cfbb0fa3ac7ebbd10377082e80ea49afa24a9"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+   (0.0ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
 Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:47 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:24 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:14:47 +0000
+Started GET "/" for 127.0.0.1 at 2018-01-23 17:16:24 +0000
+Processing by ExampleController#index as HTML
+  Rendered text template (0.0ms)
+Completed 200 OK in 0ms (Views: 0.3ms | ActiveRecord: 0.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:24 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-16 12:14:47 +0000
-Started GET "/auth/gds/callback?code=1ac88e3b7f8c401d21175e278f0ea618f206c0c4f3d16dbc2b6c2919c6db5a57&state=142a3ea2a3f6e66cf5fbee5682453a9fa167cf9d748e628d" for 127.0.0.1 at 2017-12-16 12:14:47 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:24 +0000
+Started GET "/auth/gds/callback?code=e260ffadd922aee49408fdba01481a53923ffa2f8462f23cccf62cbb999f9782&state=107bfc7e38eae0d08dc54d74ff14b15a9c967a57af421cb5" for 127.0.0.1 at 2018-01-23 17:16:24 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"1ac88e3b7f8c401d21175e278f0ea618f206c0c4f3d16dbc2b6c2919c6db5a57", "state"=>"142a3ea2a3f6e66cf5fbee5682453a9fa167cf9d748e628d"}
+  Parameters: {"code"=>"e260ffadd922aee49408fdba01481a53923ffa2f8462f23cccf62cbb999f9782", "state"=>"107bfc7e38eae0d08dc54d74ff14b15a9c967a57af421cb5"}
 Authenticating with gds_sso strategy
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
+   (0.0ms)  commit transaction
+   (0.0ms)  begin transaction
+   (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
 Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:14:47 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:24 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:47 +0000
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["email", "test@example-client.com"]]
+   (0.1ms)  begin transaction
+  SQL (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 12]]
+   (8.3ms)  commit transaction
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:24 +0000
 Processing by ExampleController#restricted as HTML
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
 Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:47 +0000
-Started GET "/auth/gds/callback?code=f1c6df8c7649d51f367e1fefd61a1e48aaa9766c8b82448e176d0a66e3c90d23&state=baadac03ef49b019f257a4fdb43046b20852e71636d301e5" for 127.0.0.1 at 2017-12-15 16:09:48 +0000
+Completed   in 1ms (ActiveRecord: 0.1ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:24 +0000
+Started GET "/auth/gds/callback?code=f1533c60944399f1391a136290e5bfac751d61e1fb98ca9a75a421a666fd5702&state=c80c433c2aa454a67d9228e89f3d981d1929d677fcdc69bf" for 127.0.0.1 at 2018-01-23 17:16:25 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"f1c6df8c7649d51f367e1fefd61a1e48aaa9766c8b82448e176d0a66e3c90d23", "state"=>"baadac03ef49b019f257a4fdb43046b20852e71636d301e5"}
+  Parameters: {"code"=>"f1533c60944399f1391a136290e5bfac751d61e1fb98ca9a75a421a666fd5702", "state"=>"c80c433c2aa454a67d9228e89f3d981d1929d677fcdc69bf"}
 Authenticating with gds_sso strategy
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+   (0.0ms)  begin transaction
+  SQL (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 12]]
+   (5.5ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:48 +0000
+Completed 302 Found in 10ms (ActiveRecord: 6.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:25 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:04:48 +0000
-Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
-  Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:48 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:25 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:48 +0000
-Started GET "/auth/gds/callback?code=2d983773bd794b39d29961081bae454fe12a4fbdadd33d94fd23e8c09231b4b3&state=09b5ea495948a1b7f0a5299568ccc579897acded362267b2" for 127.0.0.1 at 2017-12-15 16:09:48 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:25 +0000
+Started GET "/auth/gds/callback?code=ad908d82d833c29cec117f91462504cfed0a67cb9b7233fb0af9893ffc9ecd82&state=f6f9f89788416ca79638e59ea751a0bb916fa03d0819759b" for 127.0.0.1 at 2018-01-23 17:16:25 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"2d983773bd794b39d29961081bae454fe12a4fbdadd33d94fd23e8c09231b4b3", "state"=>"09b5ea495948a1b7f0a5299568ccc579897acded362267b2"}
+  Parameters: {"code"=>"ad908d82d833c29cec117f91462504cfed0a67cb9b7233fb0af9893ffc9ecd82", "state"=>"f6f9f89788416ca79638e59ea751a0bb916fa03d0819759b"}
 Authenticating with gds_sso strategy
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 5ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:48 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:25 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
 Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.1ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["email", "test@example-client.com"]]
-   (0.0ms)  begin transaction
-  SQL (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 1]]
-   (4.8ms)  commit transaction
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:48 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:21:25 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
 Authenticating with gds_sso strategy
-Completed   in 1ms (ActiveRecord: 0.1ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:48 +0000
-Started GET "/auth/gds/callback?code=69bceb62f6a0f10fd68f549f7788a45af39ca2c6461ffb16d49c3c909e69b588&state=4ca79c9ac79123e4d59cffa49c57e5f7515f3820c160d323" for 127.0.0.1 at 2017-12-15 16:09:48 +0000
+Completed   in 1ms (ActiveRecord: 0.0ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-24 13:21:25 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:25 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms (ActiveRecord: 0.0ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:25 +0000
+Started GET "/auth/gds/callback?code=d54a02d6befb119141bb82cd97f557576a575fb38635d0c1ed794a97884b1771&state=27889d6abe3e8df526d95349b3ef8a426266d11d4e4c02a9" for 127.0.0.1 at 2018-01-23 17:16:25 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"69bceb62f6a0f10fd68f549f7788a45af39ca2c6461ffb16d49c3c909e69b588", "state"=>"4ca79c9ac79123e4d59cffa49c57e5f7515f3820c160d323"}
+  Parameters: {"code"=>"d54a02d6befb119141bb82cd97f557576a575fb38635d0c1ed794a97884b1771", "state"=>"27889d6abe3e8df526d95349b3ef8a426266d11d4e4c02a9"}
 Authenticating with gds_sso strategy
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
    (0.1ms)  commit transaction
    (0.0ms)  begin transaction
-  SQL (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 1]]
-   (9.7ms)  commit transaction
+   (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 15ms (ActiveRecord: 10.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:48 +0000
+Completed 302 Found in 5ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:25 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
 Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:48 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:11:25 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
+  Rendered text template (0.0ms)
+Completed 200 OK in 2ms (Views: 0.2ms | ActiveRecord: 0.1ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:25 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:48 +0000
-Processing by ExampleController#this_requires_signin_permission as JSON
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "disabled" = ? WHERE "users"."id" = ?  [["disabled", nil], ["id", 1]]
-   (6.1ms)  commit transaction
+Completed   in 1ms (ActiveRecord: 0.0ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:25 +0000
+Started GET "/auth/gds/callback?code=87b601ba35d1440b3ccf9392f2a6555b7a3f58663c455ec63e88a26a8716fe2b&state=430e76f078d97eb50813ac831178dbf427f7ab05ace93fd0" for 127.0.0.1 at 2018-01-23 17:16:26 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"87b601ba35d1440b3ccf9392f2a6555b7a3f58663c455ec63e88a26a8716fe2b", "state"=>"430e76f078d97eb50813ac831178dbf427f7ab05ace93fd0"}
+Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
    (0.0ms)  commit transaction
-  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
-  Rendered text template (0.0ms)
-Completed 200 OK in 78ms (Views: 0.5ms | ActiveRecord: 6.9ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:48 +0000
-Processing by ExampleController#restricted as JSON
-Completed   in 24ms (ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:48 +0000
-Processing by ExampleController#restricted as JSON
-Completed   in 12ms (ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:48 +0000
-Processing by ExampleController#restricted as JSON
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
    (0.0ms)  begin transaction
    (0.1ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 5ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:26 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
-Completed 200 OK in 65ms (Views: 0.3ms | ActiveRecord: 0.7ms)
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d39331"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
-   (5.1ms)  commit transaction
-   (0.1ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d38112"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (4.1ms)  commit transaction
-Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d39331"}
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "a1s2d39331"]]
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "email" = ?, "name" = ?, "permissions" = ?, "organisation_slug" = ?, "organisation_content_id" = ? WHERE "users"."id" = ?  [["email", "user@domain.com"], ["name", "Joshua Marshall"], ["permissions", "---\n- signin\n- new permission\n"], ["organisation_slug", "justice-league"], ["organisation_content_id", "aae1319e-5788-4677-998c-f1a53af528d0"], ["id", 2]]
-   (3.8ms)  commit transaction
-Completed 200 OK in 8ms (ActiveRecord: 4.1ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT 1  [["id", 2]]
-   (0.1ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d33498"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
-   (3.7ms)  commit transaction
-   (0.1ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d32155"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (4.7ms)  commit transaction
-Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d33498"}
-  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.3ms)
-Completed 403 Forbidden in 9ms (Views: 8.7ms | ActiveRecord: 0.0ms)
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d38345"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
-   (4.1ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d31273"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (5.0ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"nonexistent-user"}
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "nonexistent-user"]]
-Completed 200 OK in 1ms (ActiveRecord: 0.1ms)
+Completed 200 OK in 2ms (Views: 0.4ms | ActiveRecord: 0.1ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:21:26 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms (ActiveRecord: 0.0ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-24 13:21:26 +0000
+Started GET "/auth/gds/callback?code=2018ac4d5ceee1b26137609fd9c339af949dcb288845e2bdd5b276dbf0321d2f&state=b163dea3674ef5feb70b88a71185a5a4cfa3ab911e7eb825" for 127.0.0.1 at 2018-01-24 13:21:26 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"2018ac4d5ceee1b26137609fd9c339af949dcb288845e2bdd5b276dbf0321d2f", "state"=>"b163dea3674ef5feb70b88a71185a5a4cfa3ab911e7eb825"}
+Authenticating with gds_sso strategy
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d33190"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
-   (8.2ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d36901"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (5.6ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d33190"}
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "a1s2d33190"]]
-   (0.0ms)  begin transaction
-  SQL (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 8]]
-   (5.1ms)  commit transaction
-Completed 200 OK in 7ms (ActiveRecord: 5.4ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT 1  [["id", 8]]
-   (0.1ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d31579"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
-   (5.1ms)  commit transaction
+   (0.1ms)  commit transaction
    (0.1ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d3111"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (6.7ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d31579"}
-  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.0ms)
-Completed 403 Forbidden in 1ms (Views: 0.7ms | ActiveRecord: 0.0ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "asd"]]
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["email", "user@example.com"]]
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions", "organisation_slug", "organisation_content_id", "disabled") VALUES (?, ?, ?, ?, ?, ?, ?)  [["uid", "asd"], ["email", "user@example.com"], ["name", "A Name"], ["permissions", "---\n- signin\n"], ["organisation_slug", "hmrc"], ["organisation_content_id", "67a2b78d-eee3-45b3-80e2-792e7f71cecc"], ["disabled", nil]]
-   (8.2ms)  commit transaction
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "asd"]]
-   (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
+   (0.1ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 5ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:21:26 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
+  Rendered text template (0.0ms)
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.1ms)
    (0.1ms)  DROP TABLE IF EXISTS "users"
-   (1.4ms)  SELECT sqlite_version(*)
-   (5.4ms)  CREATE TABLE "users" ("id" INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 'f')
-   (4.4ms)  CREATE TABLE "ar_internal_metadata" ("key" varchar NOT NULL PRIMARY KEY, "value" varchar, "created_at" datetime NOT NULL, "updated_at" datetime NOT NULL)
+   (0.9ms)  SELECT sqlite_version(*)
+   (8.0ms)  CREATE TABLE "users" ("id" INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 'f')
+   (8.3ms)  CREATE TABLE "ar_internal_metadata" ("key" varchar NOT NULL PRIMARY KEY, "value" varchar, "created_at" datetime NOT NULL, "updated_at" datetime NOT NULL)
   ActiveRecord::InternalMetadata Load (0.2ms)  SELECT  "ar_internal_metadata".* FROM "ar_internal_metadata" WHERE "ar_internal_metadata"."key" = ? LIMIT ?  [["key", "environment"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "ar_internal_metadata" ("key", "value", "created_at", "updated_at") VALUES (?, ?, ?, ?)  [["key", "environment"], ["value", "test"], ["created_at", "2017-12-15 16:09:54.955670"], ["updated_at", "2017-12-15 16:09:54.955670"]]
-   (5.3ms)  commit transaction
-   (4.8ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL PRIMARY KEY)
-  ActiveRecord::InternalMetadata Load (0.1ms)  SELECT  "ar_internal_metadata".* FROM "ar_internal_metadata" WHERE "ar_internal_metadata"."key" = ? LIMIT ?  [["key", "environment"], ["LIMIT", 1]]
+  SQL (0.2ms)  INSERT INTO "ar_internal_metadata" ("key", "value", "created_at", "updated_at") VALUES (?, ?, ?, ?)  [["key", "environment"], ["value", "test"], ["created_at", "2018-01-23 17:16:31.586695"], ["updated_at", "2018-01-23 17:16:31.586695"]]
+   (8.6ms)  commit transaction
+   (17.0ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL PRIMARY KEY)
+  ActiveRecord::InternalMetadata Load (0.2ms)  SELECT  "ar_internal_metadata".* FROM "ar_internal_metadata" WHERE "ar_internal_metadata"."key" = ? LIMIT ?  [["key", "environment"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
    (0.0ms)  commit transaction
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d34767"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (6.2ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d31259"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (4.9ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"nonexistent-user"}
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "nonexistent-user"], ["LIMIT", 1]]
-Completed 200 OK in 2ms (ActiveRecord: 0.2ms)
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d34232"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (4.2ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d37612"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (4.9ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d34232"}
-  Rendering /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
-  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.2ms)
-Completed 403 Forbidden in 11ms (Views: 10.1ms | ActiveRecord: 0.0ms)
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d33597"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (4.1ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d36085"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (4.9ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d33597"}
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d33597"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 5]]
-   (5.2ms)  commit transaction
-Completed 200 OK in 8ms (ActiveRecord: 5.5ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 5], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d31642"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (4.1ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d3471"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (3.9ms)  commit transaction
-Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d31642"}
-  Rendering /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
-  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.0ms)
-Completed 403 Forbidden in 1ms (Views: 0.4ms | ActiveRecord: 0.0ms)
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d36387"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (5.9ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d33675"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (4.1ms)  commit transaction
-Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d36387"}
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d36387"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "email" = ?, "name" = ?, "permissions" = ?, "organisation_slug" = ?, "organisation_content_id" = ? WHERE "users"."id" = ?  [["email", "user@domain.com"], ["name", "Joshua Marshall"], ["permissions", "---\n- signin\n- new permission\n"], ["organisation_slug", "justice-league"], ["organisation_content_id", "aae1319e-5788-4677-998c-f1a53af528d0"], ["id", 9]]
-   (4.0ms)  commit transaction
-Completed 200 OK in 8ms (ActiveRecord: 4.3ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 9], ["LIMIT", 1]]
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:55 +0000
-Processing by ExampleController#restricted as HTML
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:32 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
 Authenticating with gds_sso strategy
 Completed   in 6ms (ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:55 +0000
-Processing by ExampleController#restricted as JSON
-  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions", "disabled") VALUES (?, ?, ?, ?, ?)  [["name", "Test User"], ["uid", "integration-uid"], ["email", "test@example-client.com"], ["permissions", "---\n- signin\n"], ["disabled", nil]]
-   (4.7ms)  commit transaction
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:32 +0000
+Started GET "/auth/gds/callback?code=17a42fba0db9edb71043d23222be66b12729b473e38d0eba0489fcbc4d155a89&state=24233b213f99d33722d9bee469977a232036881722922f4e" for 127.0.0.1 at 2018-01-23 17:16:32 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"17a42fba0db9edb71043d23222be66b12729b473e38d0eba0489fcbc4d155a89", "state"=>"24233b213f99d33722d9bee469977a232036881722922f4e"}
+Authenticating with gds_sso strategy
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-   (0.1ms)  commit transaction
-  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
+  SQL (0.3ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Test User"], ["uid", "integration-uid"], ["email", "test@example-client.com"], ["permissions", "---\n- signin\n"]]
+   (10.1ms)  commit transaction
    (0.1ms)  begin transaction
-  SQL (0.3ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 11]]
-   (6.0ms)  commit transaction
+  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 1]]
+   (6.5ms)  commit transaction
+Redirected to http://www.example-client.com/this_requires_signin_permission
+Completed 302 Found in 38ms (ActiveRecord: 18.9ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:32 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 94ms (Views: 1.8ms | ActiveRecord: 12.5ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:55 +0000
-Processing by ExampleController#this_requires_signin_permission as JSON
+Completed 200 OK in 6ms (Views: 2.3ms | ActiveRecord: 0.2ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:32 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms (ActiveRecord: 0.0ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:32 +0000
+Started GET "/auth/gds/callback?code=2a080321a878353fead65147fe47492be7bf440103035213c313b29cd27440f0&state=0a33c40eac3b37546674a109884d471362f840df31e9c4f4" for 127.0.0.1 at 2018-01-23 17:16:32 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"2a080321a878353fead65147fe47492be7bf440103035213c313b29cd27440f0", "state"=>"0a33c40eac3b37546674a109884d471362f840df31e9c4f4"}
+Authenticating with gds_sso strategy
   User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
    (0.1ms)  commit transaction
-  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
-  Rendering text template
-  Rendered text template (0.0ms)
-Completed 200 OK in 75ms (Views: 0.3ms | ActiveRecord: 0.9ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:55 +0000
-Processing by ExampleController#restricted as JSON
-Completed   in 14ms (ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:55 +0000
-Processing by ExampleController#restricted as JSON
-Completed   in 24ms (ActiveRecord: 0.0ms)
-Started GET "/" for 127.0.0.1 at 2017-12-15 16:09:55 +0000
-Processing by ExampleController#index as HTML
+Redirected to http://www.example-client.com/this_requires_signin_permission
+Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:32 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 0ms (Views: 0.3ms | ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:55 +0000
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:32 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:55 +0000
-Started GET "/auth/gds/callback?code=e1cdfa604177d3fcb7f077f51282402a2db61bdd6470be4090cfa6118283a7d0&state=b3d616f41216c71b899beaee46ff7ad35db0a2e306324591" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
+Completed   in 1ms (ActiveRecord: 0.0ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:32 +0000
+Started GET "/auth/gds/callback?code=c38a4bb46e6f6345f1c9b4c0d29ae8afcc1d05d70e19eedcdac6242a2bba082f&state=8bb488516848ec1c43e85a2f48eddfb1854db8f1fce7942d" for 127.0.0.1 at 2018-01-23 17:16:32 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"e1cdfa604177d3fcb7f077f51282402a2db61bdd6470be4090cfa6118283a7d0", "state"=>"b3d616f41216c71b899beaee46ff7ad35db0a2e306324591"}
+  Parameters: {"code"=>"c38a4bb46e6f6345f1c9b4c0d29ae8afcc1d05d70e19eedcdac6242a2bba082f", "state"=>"8bb488516848ec1c43e85a2f48eddfb1854db8f1fce7942d"}
 Authenticating with gds_sso strategy
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "disabled" = ? WHERE "users"."id" = ?  [["disabled", "f"], ["id", 11]]
-   (5.9ms)  commit transaction
+   (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 10ms (ActiveRecord: 6.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
+Completed 302 Found in 3ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:32 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 4ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
-Processing by ExampleController#this_requires_signin_permission as HTML
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:32 +0000
+Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
-Started GET "/auth/gds/callback?code=041103629545ef7440b45d727329faee6ba7487695482e86eb146fe1d9feb8f0&state=deede6e2c1df81cf19f817b4574e8d1591c11db0f62137b5" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:32 +0000
+Started GET "/auth/gds/callback?code=73de6d7cb00e3af01bcd18b1ac6f452422be789ca5c8ba94e7fc57d2f406676e&state=9e9902a5b41cecea2e9796e3c4742e26dda9d24fad0eeefb" for 127.0.0.1 at 2018-01-23 17:16:33 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"041103629545ef7440b45d727329faee6ba7487695482e86eb146fe1d9feb8f0", "state"=>"deede6e2c1df81cf19f817b4574e8d1591c11db0f62137b5"}
+  Parameters: {"code"=>"73de6d7cb00e3af01bcd18b1ac6f452422be789ca5c8ba94e7fc57d2f406676e", "state"=>"9e9902a5b41cecea2e9796e3c4742e26dda9d24fad0eeefb"}
 Authenticating with gds_sso strategy
   User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-   (0.1ms)  commit transaction
-Redirected to http://www.example-client.com/this_requires_signin_permission
-Completed 302 Found in 3ms (ActiveRecord: 0.4ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
-Processing by ExampleController#this_requires_signin_permission as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
-  Rendering text template
-  Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.4ms | ActiveRecord: 0.2ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
-Processing by ExampleController#this_requires_signin_permission as HTML
-Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
-Started GET "/auth/gds/callback?code=e40bd744a1307d4fc723db1ffd433c763ea292d47ba7bac679420a4e48a839d6&state=ac1f0c3193efb8f3ed7c3ce66a680082a39c1649b422c012" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
-Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"e40bd744a1307d4fc723db1ffd433c763ea292d47ba7bac679420a4e48a839d6", "state"=>"ac1f0c3193efb8f3ed7c3ce66a680082a39c1649b422c012"}
-Authenticating with gds_sso strategy
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-Redirected to http://www.example-client.com/this_requires_signin_permission
+   (0.0ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
 Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
-Processing by ExampleController#this_requires_signin_permission as HTML
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:33 +0000
+Processing by ExampleController#restricted as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
-Processing by ExampleController#restricted as HTML
-Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
-Started GET "/auth/gds/callback?code=50ac4a78e6ffce0789b79a57005b68400979e0db661278d58f216d2a701ede11&state=c8fbb7cd120cf2c350c4367e709b999ec0db79a1f3371ea6" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
-Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"50ac4a78e6ffce0789b79a57005b68400979e0db661278d58f216d2a701ede11", "state"=>"c8fbb7cd120cf2c350c4367e709b999ec0db79a1f3371ea6"}
-Authenticating with gds_sso strategy
-  User Load (0.4ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 5ms (ActiveRecord: 0.6ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
-Processing by ExampleController#restricted as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
+Started GET "/" for 127.0.0.1 at 2018-01-23 17:16:33 +0000
+Processing by ExampleController#index as HTML
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
+Completed 200 OK in 1ms (Views: 0.4ms | ActiveRecord: 0.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:33 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
-Started GET "/auth/gds/callback?code=190005b367b1b115275a62351af9ddc91acc2839c6631387bbe5467dde353321&state=b59fc849f7d54dcdddfa6be199ee510726a23b5973acab4f" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:33 +0000
+Started GET "/auth/gds/callback?code=bd9ba3b67355cc8208df1dec441e3acc80455dd91c7334dce1e1e6b30cc43bb2&state=b7dee273dc2301ca31ec943fac81efab8f506645a89a4a50" for 127.0.0.1 at 2018-01-23 17:16:33 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"190005b367b1b115275a62351af9ddc91acc2839c6631387bbe5467dde353321", "state"=>"b59fc849f7d54dcdddfa6be199ee510726a23b5973acab4f"}
+  Parameters: {"code"=>"bd9ba3b67355cc8208df1dec441e3acc80455dd91c7334dce1e1e6b30cc43bb2", "state"=>"b7dee273dc2301ca31ec943fac81efab8f506645a89a4a50"}
 Authenticating with gds_sso strategy
   User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
+   (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
 Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:33 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
+Completed 200 OK in 2ms (Views: 0.5ms | ActiveRecord: 0.3ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:33 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:56 +0000
-Started GET "/auth/gds/callback?code=bfab66fd6f1c24ab3df406d0a831292dbe9d41665c35788c33b88222209fd659&state=a06fd740720ed0745fe9aa9913d9f1ed059cb59ee8165d30" for 127.0.0.1 at 2017-12-15 16:09:57 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:33 +0000
+Started GET "/auth/gds/callback?code=5ae2793133376ba020e354f32dcb6e916a2d1bea7565fdb9967acd170d9dbd42&state=2f3482b86e454876ce678417d934f70afc2dea7c63d35e2d" for 127.0.0.1 at 2018-01-23 17:16:33 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"bfab66fd6f1c24ab3df406d0a831292dbe9d41665c35788c33b88222209fd659", "state"=>"a06fd740720ed0745fe9aa9913d9f1ed059cb59ee8165d30"}
+  Parameters: {"code"=>"5ae2793133376ba020e354f32dcb6e916a2d1bea7565fdb9967acd170d9dbd42", "state"=>"2f3482b86e454876ce678417d934f70afc2dea7c63d35e2d"}
 Authenticating with gds_sso strategy
   User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
 Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:57 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:33 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
@@ -1363,450 +1258,520 @@ Processing by ExampleController#restricted as HTML
 Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 11]]
-   (6.9ms)  commit transaction
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:57 +0000
+  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 1]]
+   (7.1ms)  commit transaction
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:33 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
 Authenticating with gds_sso strategy
-Completed   in 2ms (ActiveRecord: 0.3ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:57 +0000
-Started GET "/auth/gds/callback?code=3a5888b74d6b6d60f8b6b931c7debee812adcf56ccac13d9c1d8bb99d2859a2e&state=952acf10d994e0f6b2975dd619bb6d6139456c554268de63" for 127.0.0.1 at 2017-12-15 16:09:57 +0000
+Completed   in 1ms (ActiveRecord: 0.2ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:33 +0000
+Started GET "/auth/gds/callback?code=0eb80c3582b538ea33f48bbde7765b4a757c2c684288b0f365802f81ed10a94d&state=59a0890064a4f89f2217c34f38ecf633d7c93f498cb500a7" for 127.0.0.1 at 2018-01-23 17:16:33 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"3a5888b74d6b6d60f8b6b931c7debee812adcf56ccac13d9c1d8bb99d2859a2e", "state"=>"952acf10d994e0f6b2975dd619bb6d6139456c554268de63"}
+  Parameters: {"code"=>"0eb80c3582b538ea33f48bbde7765b4a757c2c684288b0f365802f81ed10a94d", "state"=>"59a0890064a4f89f2217c34f38ecf633d7c93f498cb500a7"}
 Authenticating with gds_sso strategy
   User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 11]]
-   (7.7ms)  commit transaction
+   (0.0ms)  commit transaction
+   (0.0ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 1]]
+   (10.5ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 13ms (ActiveRecord: 8.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:57 +0000
+Completed 302 Found in 15ms (ActiveRecord: 11.1ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:33 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:57 +0000
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.3ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:34 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:57 +0000
-Started GET "/auth/gds/callback?code=c1bda7e7bf0e9503e7ba4715d39b7ea28b51a86d480baa049c0c226afd7de71f&state=69894aa823a9c6ed2c53935eb079fdd8256294078fa04555" for 127.0.0.1 at 2017-12-15 16:09:57 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:34 +0000
+Started GET "/auth/gds/callback?code=c1fdf98b5a864edaf59fcd1e56055ab03e91cea5019ff7937bd5795cee4226f9&state=3349bb3c25b824fad9b7f19c292158c2d651bd18c6d9e619" for 127.0.0.1 at 2018-01-23 17:16:34 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"c1bda7e7bf0e9503e7ba4715d39b7ea28b51a86d480baa049c0c226afd7de71f", "state"=>"69894aa823a9c6ed2c53935eb079fdd8256294078fa04555"}
+  Parameters: {"code"=>"c1fdf98b5a864edaf59fcd1e56055ab03e91cea5019ff7937bd5795cee4226f9", "state"=>"3349bb3c25b824fad9b7f19c292158c2d651bd18c6d9e619"}
 Authenticating with gds_sso strategy
-  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+  User Load (0.4ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
    (0.1ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:57 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.5ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:34 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.4ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:14:57 +0000
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:21:34 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-16 12:14:57 +0000
-Started GET "/auth/gds/callback?code=f405ca673f4e3d265d6e136a1cf94d0e2e66e4befb4c8bd9da1ce1921fdbcca1&state=bf5701cbec4c4b9a5b2c9d004a2e5d7e797c368fb376dcea" for 127.0.0.1 at 2017-12-16 12:14:57 +0000
+Completed   in 1ms (ActiveRecord: 0.0ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-24 13:21:34 +0000
+Started GET "/auth/gds/callback?code=123efcc87f2412daa5e1ec5b16d8e99f19608c8c2a060f9b9118e9e819a6ef10&state=cbe8977a609bbbb011cf6abc9b9b53cb0c5d6a14756d7be4" for 127.0.0.1 at 2018-01-24 13:21:34 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"f405ca673f4e3d265d6e136a1cf94d0e2e66e4befb4c8bd9da1ce1921fdbcca1", "state"=>"bf5701cbec4c4b9a5b2c9d004a2e5d7e797c368fb376dcea"}
+  Parameters: {"code"=>"123efcc87f2412daa5e1ec5b16d8e99f19608c8c2a060f9b9118e9e819a6ef10", "state"=>"cbe8977a609bbbb011cf6abc9b9b53cb0c5d6a14756d7be4"}
 Authenticating with gds_sso strategy
-  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+  User Load (0.5ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
    (0.1ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:14:57 +0000
+Completed 302 Found in 5ms (ActiveRecord: 0.7ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:21:34 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:57 +0000
+Completed 200 OK in 3ms (Views: 0.5ms | ActiveRecord: 0.3ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:34 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:57 +0000
-Started GET "/auth/gds/callback?code=0aa142a0825535df30bac2591c9de135ad34c425c90ae2bfb3f54440e577bf79&state=3520ea677b734b1c1565b09499acdeef74e93ea38fdcec58" for 127.0.0.1 at 2017-12-15 16:09:57 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:34 +0000
+Started GET "/auth/gds/callback?code=611fe54437d99e9ef911f40f0eb6d88da725d6db15ab2839893ae823ec9fc1cf&state=bc388674129216ae86a40fda0bb2259b689b195cb130a47f" for 127.0.0.1 at 2018-01-23 17:16:34 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"0aa142a0825535df30bac2591c9de135ad34c425c90ae2bfb3f54440e577bf79", "state"=>"3520ea677b734b1c1565b09499acdeef74e93ea38fdcec58"}
+  Parameters: {"code"=>"611fe54437d99e9ef911f40f0eb6d88da725d6db15ab2839893ae823ec9fc1cf", "state"=>"bc388674129216ae86a40fda0bb2259b689b195cb130a47f"}
 Authenticating with gds_sso strategy
   User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-   (0.2ms)  commit transaction
+   (0.1ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.5ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:57 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:34 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:14:57 +0000
+Completed 200 OK in 2ms (Views: 0.4ms | ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:21:34 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 1ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-16 12:14:57 +0000
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:58 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-24 13:21:34 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:34 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:09:58 +0000
-Started GET "/auth/gds/callback?code=2aa0611d63b27dbea5219240e61012298df8cf22429d52c43ba071e1a9387d27&state=4924575b260dd947a80bd8c97aac61268cab2393369d78ef" for 127.0.0.1 at 2017-12-15 16:09:58 +0000
+Completed   in 1ms (ActiveRecord: 0.0ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:34 +0000
+Started GET "/auth/gds/callback?code=12cd97d03fa4a8af87cb27aee46071db01ea6660ef561c46956e2bd1e86d1d64&state=ce170ec55c3c39bd341a58bcca295dd7ec4b3b6c4e5a1bcc" for 127.0.0.1 at 2018-01-23 17:16:34 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"2aa0611d63b27dbea5219240e61012298df8cf22429d52c43ba071e1a9387d27", "state"=>"4924575b260dd947a80bd8c97aac61268cab2393369d78ef"}
+  Parameters: {"code"=>"12cd97d03fa4a8af87cb27aee46071db01ea6660ef561c46956e2bd1e86d1d64", "state"=>"ce170ec55c3c39bd341a58bcca295dd7ec4b3b6c4e5a1bcc"}
 Authenticating with gds_sso strategy
   User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
+   (0.1ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:09:58 +0000
+Completed 302 Found in 5ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:34 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:04:58 +0000
+Completed 200 OK in 2ms (Views: 0.6ms | ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:11:35 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 2ms (Views: 0.5ms | ActiveRecord: 0.2ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:35 +0000
+Processing by ExampleController#restricted as JSON
+Completed   in 54ms (ActiveRecord: 0.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:35 +0000
+Processing by ExampleController#restricted as JSON
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.3ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "disabled" = ? WHERE "users"."id" = ?  [["disabled", nil], ["id", 1]]
+   (7.8ms)  commit transaction
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+  Rendering text template
+  Rendered text template (0.0ms)
+Completed 200 OK in 109ms (Views: 0.3ms | ActiveRecord: 9.3ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:35 +0000
+Processing by ExampleController#this_requires_signin_permission as JSON
+  User Load (0.4ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+  Rendering text template
+  Rendered text template (0.0ms)
+Completed 200 OK in 86ms (Views: 0.3ms | ActiveRecord: 1.1ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:35 +0000
+Processing by ExampleController#restricted as JSON
+Completed   in 14ms (ActiveRecord: 0.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:35 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms (ActiveRecord: 0.0ms)
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "user@example.com"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
+   (0.1ms)  begin transaction
   SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions", "organisation_slug", "organisation_content_id", "disabled") VALUES (?, ?, ?, ?, ?, ?, ?)  [["name", "A Name"], ["uid", "asd"], ["email", "user@example.com"], ["permissions", "---\n- signin\n"], ["organisation_slug", "hmrc"], ["organisation_content_id", "67a2b78d-eee3-45b3-80e2-792e7f71cecc"], ["disabled", nil]]
-   (8.7ms)  commit transaction
+   (6.8ms)  commit transaction
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
    (0.0ms)  commit transaction
-   (12.0ms)  CREATE TABLE "users" ("id" INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 'f') 
-   (5.0ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL) 
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d36378"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (6.8ms)  commit transaction
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d3113"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (5.2ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"a1s2d36378"}
+  Rendering /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
+  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.3ms)
+Completed 403 Forbidden in 11ms (Views: 9.7ms | ActiveRecord: 0.0ms)
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d38646"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (7.6ms)  commit transaction
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d36943"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (5.6ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"a1s2d38646"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d38646"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 5]]
+   (8.4ms)  commit transaction
+Completed 200 OK in 12ms (ActiveRecord: 8.8ms)
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 5], ["LIMIT", 1]]
+   (0.6ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d39704"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (7.9ms)  commit transaction
+   (0.2ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d39238"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (6.5ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"nonexistent-user"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "nonexistent-user"], ["LIMIT", 1]]
+Completed 200 OK in 1ms (ActiveRecord: 0.1ms)
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d32434"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (6.3ms)  commit transaction
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d32843"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (5.3ms)  commit transaction
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d32434"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d32434"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "email" = ?, "name" = ?, "permissions" = ?, "organisation_slug" = ?, "organisation_content_id" = ? WHERE "users"."id" = ?  [["email", "user@domain.com"], ["name", "Joshua Marshall"], ["permissions", "---\n- signin\n- new permission\n"], ["organisation_slug", "justice-league"], ["organisation_content_id", "aae1319e-5788-4677-998c-f1a53af528d0"], ["id", 9]]
+   (6.7ms)  commit transaction
+Completed 200 OK in 10ms (ActiveRecord: 7.1ms)
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 9], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d31342"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (7.5ms)  commit transaction
+   (0.1ms)  begin transaction
+  SQL (0.3ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d32479"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (9.4ms)  commit transaction
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d31342"}
+  Rendering /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
+  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.0ms)
+Completed 403 Forbidden in 2ms (Views: 0.6ms | ActiveRecord: 0.0ms)
+   (7.6ms)  CREATE TABLE "users" ("id" INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 'f') 
+   (7.7ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL) 
    (0.1ms)  select sqlite_version(*)
-   (3.9ms)  CREATE UNIQUE INDEX "unique_schema_migrations" ON "schema_migrations" ("version")
+   (7.3ms)  CREATE UNIQUE INDEX "unique_schema_migrations" ON "schema_migrations" ("version")
    (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d39124"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
-   (5.0ms)  commit transaction
+  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d32225"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
+   (6.9ms)  commit transaction
    (0.0ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d31728"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (3.9ms)  commit transaction
-Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d39124"}
-  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.2ms)
-Completed 403 Forbidden in 15ms (Views: 15.0ms | ActiveRecord: 0.0ms)
-   (0.1ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d35819"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
-   (10.7ms)  commit transaction
-   (0.1ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d34231"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (6.0ms)  commit transaction
-Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d35819"}
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "a1s2d35819"]]
+  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d34488"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (6.9ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"nonexistent-user"}
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "nonexistent-user"]]
+Completed 200 OK in 7ms (ActiveRecord: 0.3ms)
    (0.1ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "email" = ?, "name" = ?, "permissions" = ?, "organisation_slug" = ?, "organisation_content_id" = ? WHERE "users"."id" = ?  [["email", "user@domain.com"], ["name", "Joshua Marshall"], ["permissions", "---\n- signin\n- new permission\n"], ["organisation_slug", "justice-league"], ["organisation_content_id", "aae1319e-5788-4677-998c-f1a53af528d0"], ["id", 3]]
-   (4.7ms)  commit transaction
-Completed 200 OK in 15ms (ActiveRecord: 5.2ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT 1  [["id", 3]]
-   (0.0ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d39552"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
-   (5.3ms)  commit transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d38732"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
+   (7.1ms)  commit transaction
    (0.0ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d33231"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (6.6ms)  commit transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d39399"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (7.1ms)  commit transaction
 Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d39552"}
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "a1s2d39552"]]
+  Parameters: {"uid"=>"a1s2d38732"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "a1s2d38732"]]
    (0.1ms)  begin transaction
-  SQL (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 5]]
-   (4.8ms)  commit transaction
-Completed 200 OK in 7ms (ActiveRecord: 5.1ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT 1  [["id", 5]]
-   (0.0ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d34526"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
-   (5.8ms)  commit transaction
+  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 3]]
+   (6.6ms)  commit transaction
+Completed 200 OK in 10ms (ActiveRecord: 6.9ms)
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT 1  [["id", 3]]
+   (0.1ms)  begin transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d38945"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
+   (6.4ms)  commit transaction
    (0.1ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d34701"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (4.7ms)  commit transaction
+  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d33233"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (5.2ms)  commit transaction
 Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d34526"}
-  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.0ms)
-Completed 403 Forbidden in 1ms (Views: 0.5ms | ActiveRecord: 0.0ms)
+  Parameters: {"uid"=>"a1s2d38945"}
+  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.2ms)
+Completed 403 Forbidden in 13ms (Views: 12.4ms | ActiveRecord: 0.0ms)
    (0.1ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d33985"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
-   (4.5ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d33085"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (3.7ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"nonexistent-user"}
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "nonexistent-user"]]
-Completed 200 OK in 1ms (ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:05 +0000
+  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d31359"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
+   (7.6ms)  commit transaction
+   (0.1ms)  begin transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d31852"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (9.7ms)  commit transaction
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d31359"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "a1s2d31359"]]
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "email" = ?, "name" = ?, "permissions" = ?, "organisation_slug" = ?, "organisation_content_id" = ? WHERE "users"."id" = ?  [["email", "user@domain.com"], ["name", "Joshua Marshall"], ["permissions", "---\n- signin\n- new permission\n"], ["organisation_slug", "justice-league"], ["organisation_content_id", "aae1319e-5788-4677-998c-f1a53af528d0"], ["id", 7]]
+   (9.7ms)  commit transaction
+Completed 200 OK in 14ms (ActiveRecord: 10.0ms)
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT 1  [["id", 7]]
+   (0.1ms)  begin transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d32067"], ["email", "old@domain.com"], ["name", "Moshua Jarshall"], ["permissions", "---\n- signin\n"]]
+   (6.2ms)  commit transaction
+   (0.1ms)  begin transaction
+  SQL (0.1ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "a1s2d36149"], ["email", "ssopushuser@legit.com"], ["name", "SSO Push user"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (6.2ms)  commit transaction
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d32067"}
+  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.1ms)
+Completed 403 Forbidden in 1ms (Views: 0.5ms | ActiveRecord: 0.0ms)
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "asd"]]
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["email", "user@example.com"]]
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions", "organisation_slug", "organisation_content_id", "disabled") VALUES (?, ?, ?, ?, ?, ?, ?)  [["uid", "asd"], ["email", "user@example.com"], ["name", "A Name"], ["permissions", "---\n- signin\n"], ["organisation_slug", "hmrc"], ["organisation_content_id", "67a2b78d-eee3-45b3-80e2-792e7f71cecc"], ["disabled", nil]]
+   (8.1ms)  commit transaction
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "asd"]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:41 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 8ms (ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:05 +0000
-Processing by ExampleController#restricted as JSON
-Completed   in 29ms (ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:05 +0000
-Processing by ExampleController#restricted as JSON
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:41 +0000
+Started GET "/auth/gds/callback?code=6106d79a79b74b6ce966fc681eadc9cf6183d8cafaac9e1d9aa03ea7c6e6be12&state=f153a3d2c341f99dc776933bbc53eca91287c695d2cc6239" for 127.0.0.1 at 2018-01-23 17:16:41 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"6106d79a79b74b6ce966fc681eadc9cf6183d8cafaac9e1d9aa03ea7c6e6be12", "state"=>"f153a3d2c341f99dc776933bbc53eca91287c695d2cc6239"}
+Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["email", "test@example-client.com"]]
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions", "disabled") VALUES (?, ?, ?, ?, ?)  [["uid", "integration-uid"], ["email", "test@example-client.com"], ["name", "Test User"], ["permissions", "---\n- signin\n"], ["disabled", nil]]
-   (4.4ms)  commit transaction
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["email", "test@example-client.com"]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions") VALUES (?, ?, ?, ?)  [["uid", "integration-uid"], ["email", "test@example-client.com"], ["name", "Test User"], ["permissions", "---\n- signin\n"]]
+   (7.5ms)  commit transaction
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.0ms)  begin transaction
-   (0.1ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 11]]
-   (10.4ms)  commit transaction
+  SQL (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 12]]
+   (6.3ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 20ms (ActiveRecord: 14.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:41 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
-Completed 200 OK in 105ms (Views: 9.6ms | ActiveRecord: 16.0ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:10:06 +0000
-Processing by ExampleController#this_requires_signin_permission as JSON
+Completed 200 OK in 6ms (Views: 3.8ms | ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:41 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms (ActiveRecord: 0.0ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:41 +0000
+Started GET "/auth/gds/callback?code=537ea2c55975819c6dcf755928345c86fc3ebf88017260f4d915da9bb0e01f74&state=cd553d8d2c035594abc2d5790a4c8ad05d5ca54d333801a8" for 127.0.0.1 at 2018-01-23 17:16:41 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"537ea2c55975819c6dcf755928345c86fc3ebf88017260f4d915da9bb0e01f74", "state"=>"cd553d8d2c035594abc2d5790a4c8ad05d5ca54d333801a8"}
+Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
    (0.0ms)  commit transaction
-  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
+   (0.0ms)  begin transaction
    (0.0ms)  commit transaction
-  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 4ms (ActiveRecord: 0.3ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:41 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
-Completed 200 OK in 71ms (Views: 0.3ms | ActiveRecord: 0.7ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:06 +0000
-Processing by ExampleController#restricted as JSON
-Completed   in 12ms (ActiveRecord: 0.0ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:10:06 +0000
-Processing by ExampleController#this_requires_signin_permission as HTML
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
+Started GET "/" for 127.0.0.1 at 2018-01-23 17:16:41 +0000
+Processing by ExampleController#index as HTML
+  Rendered text template (0.0ms)
+Completed 200 OK in 0ms (Views: 0.3ms | ActiveRecord: 0.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:42 +0000
+Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:06 +0000
-Started GET "/auth/gds/callback?code=54a2a37a8d993f5e20c6ccdc15cc4b605e2b53eb0b90c8bf3469ae8e22c0a688&state=011831a31bf3553db15e5bc9f6ca9ae577bc77730f6e9abb" for 127.0.0.1 at 2017-12-15 16:10:06 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:42 +0000
+Started GET "/auth/gds/callback?code=75762056352bf45881acad93cf87b40584548efe92ca742d40eea5796e7f95d1&state=60274fa363afb7ea3c4e855de18380b22dd6564878783054" for 127.0.0.1 at 2018-01-23 17:16:42 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"54a2a37a8d993f5e20c6ccdc15cc4b605e2b53eb0b90c8bf3469ae8e22c0a688", "state"=>"011831a31bf3553db15e5bc9f6ca9ae577bc77730f6e9abb"}
+  Parameters: {"code"=>"75762056352bf45881acad93cf87b40584548efe92ca742d40eea5796e7f95d1", "state"=>"60274fa363afb7ea3c4e855de18380b22dd6564878783054"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "disabled" = ? WHERE "users"."id" = ?  [["disabled", "f"], ["id", 11]]
-   (4.9ms)  commit transaction
-   (0.0ms)  begin transaction
-   (0.1ms)  commit transaction
-Redirected to http://www.example-client.com/this_requires_signin_permission
-Completed 302 Found in 9ms (ActiveRecord: 5.3ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:10:06 +0000
-Processing by ExampleController#this_requires_signin_permission as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
+   (0.0ms)  commit transaction
+   (0.0ms)  begin transaction
+   (0.1ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:42 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.2ms | ActiveRecord: 0.2ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:10:06 +0000
+Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.1ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:42 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:06 +0000
-Started GET "/auth/gds/callback?code=b1015927d1ad7ff4508a6cc783ee12df3be3ee9306acc40bc47d79fec5e34aff&state=9e12447884783b9b3ba381800d5b7a4b57c739899a745390" for 127.0.0.1 at 2017-12-15 16:10:06 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:42 +0000
+Started GET "/auth/gds/callback?code=9f2b674c802fb034c682048ed6fbcde2488bcdbc3ec8168298118af59d6e044e&state=7f43402cf964163c666a8cae676b451ebdf47254573162fa" for 127.0.0.1 at 2018-01-23 17:16:42 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"b1015927d1ad7ff4508a6cc783ee12df3be3ee9306acc40bc47d79fec5e34aff", "state"=>"9e12447884783b9b3ba381800d5b7a4b57c739899a745390"}
+  Parameters: {"code"=>"9f2b674c802fb034c682048ed6fbcde2488bcdbc3ec8168298118af59d6e044e", "state"=>"7f43402cf964163c666a8cae676b451ebdf47254573162fa"}
 Authenticating with gds_sso strategy
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+   (0.0ms)  begin transaction
+   (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/this_requires_signin_permission
 Completed 302 Found in 4ms (ActiveRecord: 0.3ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:10:06 +0000
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:42 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:06 +0000
-Processing by ExampleController#restricted as HTML
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.1ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:42 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:06 +0000
-Started GET "/auth/gds/callback?code=0eccec06081d7924c253cdc60eaf88f5bf151bd57cbfb2abc4eef9471f403fdb&state=8cfbd0191d1eb66e26add649554468cf5b5ebd4d070e810b" for 127.0.0.1 at 2017-12-15 16:10:06 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:42 +0000
+Started GET "/auth/gds/callback?code=ed46f97d99c5ad6f300cdda521b8c1f64e0c44dfd7db2322da18a68f034837eb&state=2fde8b89ee229191745897442c29fd955af24b299d3353b4" for 127.0.0.1 at 2018-01-23 17:16:42 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"0eccec06081d7924c253cdc60eaf88f5bf151bd57cbfb2abc4eef9471f403fdb", "state"=>"8cfbd0191d1eb66e26add649554468cf5b5ebd4d070e810b"}
+  Parameters: {"code"=>"ed46f97d99c5ad6f300cdda521b8c1f64e0c44dfd7db2322da18a68f034837eb", "state"=>"2fde8b89ee229191745897442c29fd955af24b299d3353b4"}
 Authenticating with gds_sso strategy
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
-Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:06 +0000
-Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+Redirected to http://www.example-client.com/this_requires_signin_permission
+Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:42 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:06 +0000
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.1ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:42 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:06 +0000
-Started GET "/auth/gds/callback?code=d55c23b8ea66c10f211d9f56c6853ac896f26fb83bc8437d406a39e5cdf09409&state=6a0c14caf9575a1d7bb955e36ac2fcb4d29d4e2a39df7041" for 127.0.0.1 at 2017-12-15 16:10:07 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:42 +0000
+Started GET "/auth/gds/callback?code=1176766ab4954ad6859e4dd74e8451b2e7ff2c24f7bf2a9f4195cfca1a04887d&state=22615fea0ce095a9335bdd74c0ff84b4962a30de5fbf53ab" for 127.0.0.1 at 2018-01-23 17:16:42 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"d55c23b8ea66c10f211d9f56c6853ac896f26fb83bc8437d406a39e5cdf09409", "state"=>"6a0c14caf9575a1d7bb955e36ac2fcb4d29d4e2a39df7041"}
+  Parameters: {"code"=>"1176766ab4954ad6859e4dd74e8451b2e7ff2c24f7bf2a9f4195cfca1a04887d", "state"=>"22615fea0ce095a9335bdd74c0ff84b4962a30de5fbf53ab"}
 Authenticating with gds_sso strategy
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-   (0.0ms)  begin transaction
-   (0.1ms)  commit transaction
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+   (0.0ms)  begin transaction
+   (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
 Completed 302 Found in 4ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:07 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:42 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:07 +0000
-Processing by ExampleController#restricted as HTML
-Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:07 +0000
-Started GET "/auth/gds/callback?code=ea8160563e46d9f0f88ae2668dcfffe50024e58e04dfdfa3244907689c5a225f&state=7909b721d2c97d3b204033e499fd3794cfd2f4b91cf69075" for 127.0.0.1 at 2017-12-15 16:10:07 +0000
-Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"ea8160563e46d9f0f88ae2668dcfffe50024e58e04dfdfa3244907689c5a225f", "state"=>"7909b721d2c97d3b204033e499fd3794cfd2f4b91cf69075"}
-Authenticating with gds_sso strategy
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
-Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 3ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:07 +0000
+Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.1ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:11:42 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.1ms)
-Started GET "/" for 127.0.0.1 at 2017-12-15 16:10:07 +0000
-Processing by ExampleController#index as HTML
-  Rendered text template (0.0ms)
-Completed 200 OK in 0ms (Views: 0.2ms | ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:07 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:42 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:07 +0000
-Started GET "/auth/gds/callback?code=7e8a58faa123cdd79e6e7c48baa86ac44d86efd876452681d29dfd3faa62b7af&state=7460db97e12d696b1ce646e05bdcc0e56beeeda8484a5f2e" for 127.0.0.1 at 2017-12-15 16:10:07 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:42 +0000
+Started GET "/auth/gds/callback?code=8d1bde939b83603fedd3af07e0c33fdfbb6e8865854eea34291da532773df4a0&state=1593a7cf9b1b98e2bd7c669230a893b4823f8fb2de2646b7" for 127.0.0.1 at 2018-01-23 17:16:43 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"7e8a58faa123cdd79e6e7c48baa86ac44d86efd876452681d29dfd3faa62b7af", "state"=>"7460db97e12d696b1ce646e05bdcc0e56beeeda8484a5f2e"}
+  Parameters: {"code"=>"8d1bde939b83603fedd3af07e0c33fdfbb6e8865854eea34291da532773df4a0", "state"=>"1593a7cf9b1b98e2bd7c669230a893b4823f8fb2de2646b7"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
+   (0.1ms)  commit transaction
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:07 +0000
-Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
-  Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["email", "test@example-client.com"]]
-   (0.1ms)  begin transaction
-  SQL (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 11]]
-   (4.4ms)  commit transaction
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:07 +0000
-Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
-Authenticating with gds_sso strategy
-Completed   in 1ms (ActiveRecord: 0.1ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:07 +0000
-Started GET "/auth/gds/callback?code=43d9ec3fe981731e37f25e0d25163d102674a138086b682538079459076b28ec&state=eb97ca93c648895c31eb4f32dc6248af74fb24269901c970" for 127.0.0.1 at 2017-12-15 16:10:07 +0000
-Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"43d9ec3fe981731e37f25e0d25163d102674a138086b682538079459076b28ec", "state"=>"eb97ca93c648895c31eb4f32dc6248af74fb24269901c970"}
-Authenticating with gds_sso strategy
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
-   (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 11]]
-   (7.1ms)  commit transaction
-Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 11ms (ActiveRecord: 7.5ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:07 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:43 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:07 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:21:43 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:07 +0000
-Started GET "/auth/gds/callback?code=2321b9208d545bd4b9063b4838dadd9afb39d1b2371fb9604639406328a6f0c7&state=051e2d81d0653ec95d9bfa3a47cedf99e43643a9c7c0e051" for 127.0.0.1 at 2017-12-15 16:10:07 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-24 13:21:43 +0000
+Started GET "/auth/gds/callback?code=12140e420d4d908b4b64d228583445680dcf7909e2197b9b736172bb7701797f&state=c235ca078b03dc2b41f2801367dfd1b9677716ed9a774544" for 127.0.0.1 at 2018-01-24 13:21:43 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"2321b9208d545bd4b9063b4838dadd9afb39d1b2371fb9604639406328a6f0c7", "state"=>"051e2d81d0653ec95d9bfa3a47cedf99e43643a9c7c0e051"}
+  Parameters: {"code"=>"12140e420d4d908b4b64d228583445680dcf7909e2197b9b736172bb7701797f", "state"=>"c235ca078b03dc2b41f2801367dfd1b9677716ed9a774544"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
+   (0.1ms)  commit transaction
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:08 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:21:43 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:15:08 +0000
+Completed 200 OK in 2ms (Views: 0.4ms | ActiveRecord: 0.1ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:43 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-16 12:15:08 +0000
-Started GET "/auth/gds/callback?code=77596a542651594ffa0d074fda272e975649b9db786f0f18d95b114ad4ba2302&state=60eea84e1fb47a0dea30a419dcd0c73b9d8382f05085271b" for 127.0.0.1 at 2017-12-16 12:15:08 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:43 +0000
+Started GET "/auth/gds/callback?code=16ac32f84623ed4f68818264eb2ef44114b1a87676cd2cb44b4741e573f8fa23&state=c9d60f158b3ee597fe06ff96fe18a421f81d0a52b4ed67f3" for 127.0.0.1 at 2018-01-23 17:16:43 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"77596a542651594ffa0d074fda272e975649b9db786f0f18d95b114ad4ba2302", "state"=>"60eea84e1fb47a0dea30a419dcd0c73b9d8382f05085271b"}
+  Parameters: {"code"=>"16ac32f84623ed4f68818264eb2ef44114b1a87676cd2cb44b4741e573f8fa23", "state"=>"c9d60f158b3ee597fe06ff96fe18a421f81d0a52b4ed67f3"}
 Authenticating with gds_sso strategy
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
    (0.0ms)  commit transaction
    (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
+   (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
 Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:15:08 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:43 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:08 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:21:43 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 1ms (ActiveRecord: 0.0ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-24 13:21:43 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:43 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:08 +0000
-Started GET "/auth/gds/callback?code=0b3df9acb34916760c34d3e5f27cbb6c18c605bc0b2d9b3aed7eeef87f78b7c8&state=68865ca4bdab4e127def223513e02254d3fbf971c16242af" for 127.0.0.1 at 2017-12-15 16:10:08 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:43 +0000
+Started GET "/auth/gds/callback?code=90d741d593cffcaa80b0bc5b5d2de50e4dc5acaeadf41743a1b8084f44897c32&state=f5fb0f62b214bd9b9e90f506e366e3edb85d635d540d93e3" for 127.0.0.1 at 2018-01-23 17:16:43 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"0b3df9acb34916760c34d3e5f27cbb6c18c605bc0b2d9b3aed7eeef87f78b7c8", "state"=>"68865ca4bdab4e127def223513e02254d3fbf971c16242af"}
+  Parameters: {"code"=>"90d741d593cffcaa80b0bc5b5d2de50e4dc5acaeadf41743a1b8084f44897c32", "state"=>"f5fb0f62b214bd9b9e90f506e366e3edb85d635d540d93e3"}
 Authenticating with gds_sso strategy
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
@@ -1814,422 +1779,457 @@ Authenticating with gds_sso strategy
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 3ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:08 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:43 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:05:08 +0000
+Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.1ms)
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["email", "test@example-client.com"]]
+   (0.0ms)  begin transaction
+  SQL (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 12]]
+   (10.6ms)  commit transaction
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:43 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
-  Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:08 +0000
-Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:08 +0000
-Started GET "/auth/gds/callback?code=6cec5190400a02b797de1152634b34e5f135f400495ca09d9d7e696757b47901&state=2b2f937b1c9badb8728367f454f11118f1ee1f958da28b6d" for 127.0.0.1 at 2017-12-15 16:10:08 +0000
+Completed   in 1ms (ActiveRecord: 0.1ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:43 +0000
+Started GET "/auth/gds/callback?code=afc5d8ec921423e82ded653ce384613f07962359d1d331d654a8c735a83b3ba3&state=2eda5b67171a2e64f78f886ab25a9877673ac8101e911645" for 127.0.0.1 at 2018-01-23 17:16:44 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"6cec5190400a02b797de1152634b34e5f135f400495ca09d9d7e696757b47901", "state"=>"2b2f937b1c9badb8728367f454f11118f1ee1f958da28b6d"}
+  Parameters: {"code"=>"afc5d8ec921423e82ded653ce384613f07962359d1d331d654a8c735a83b3ba3", "state"=>"2eda5b67171a2e64f78f886ab25a9877673ac8101e911645"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
+   (0.1ms)  commit transaction
    (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
+  SQL (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 12]]
+   (7.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 3ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:08 +0000
+Completed 302 Found in 12ms (ActiveRecord: 7.5ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:44 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"], ["remotely_signed_out", "f"]]
   Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:15:08 +0000
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.1ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:44 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-16 12:15:08 +0000
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "asd"]]
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["email", "user@example.com"]]
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:44 +0000
+Processing by ExampleController#restricted as JSON
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
    (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("uid", "email", "name", "permissions", "organisation_slug", "organisation_content_id", "disabled") VALUES (?, ?, ?, ?, ?, ?, ?)  [["uid", "asd"], ["email", "user@example.com"], ["name", "A Name"], ["permissions", "---\n- signin\n"], ["organisation_slug", "hmrc"], ["organisation_content_id", "67a2b78d-eee3-45b3-80e2-792e7f71cecc"], ["disabled", nil]]
-   (6.3ms)  commit transaction
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "asd"]]
+  SQL (0.4ms)  UPDATE "users" SET "disabled" = ? WHERE "users"."id" = ?  [["disabled", nil], ["id", 12]]
+   (7.7ms)  commit transaction
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
+  Rendered text template (0.0ms)
+Completed 200 OK in 80ms (Views: 0.4ms | ActiveRecord: 8.9ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:44 +0000
+Processing by ExampleController#restricted as JSON
+Completed   in 13ms (ActiveRecord: 0.0ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:44 +0000
+Processing by ExampleController#this_requires_signin_permission as JSON
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+  CACHE (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ?  ORDER BY "users"."id" ASC LIMIT 1  [["uid", "integration-uid"]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+  Rendered text template (0.0ms)
+Completed 200 OK in 93ms (Views: 0.3ms | ActiveRecord: 0.8ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:44 +0000
+Processing by ExampleController#restricted as JSON
+Completed   in 24ms (ActiveRecord: 0.0ms)
    (0.1ms)  DROP TABLE IF EXISTS "users"
-   (1.4ms)  SELECT sqlite_version(*)
-   (8.0ms)  CREATE TABLE "users" ("id" INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 'f')
-   (8.6ms)  CREATE TABLE "ar_internal_metadata" ("key" varchar NOT NULL PRIMARY KEY, "value" varchar, "created_at" datetime NOT NULL, "updated_at" datetime NOT NULL)
-  ActiveRecord::InternalMetadata Load (0.2ms)  SELECT  "ar_internal_metadata".* FROM "ar_internal_metadata" WHERE "ar_internal_metadata"."key" = ? LIMIT ?  [["key", "environment"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "ar_internal_metadata" ("key", "value", "created_at", "updated_at") VALUES (?, ?, ?, ?)  [["key", "environment"], ["value", "test"], ["created_at", "2017-12-15 16:10:14.354442"], ["updated_at", "2017-12-15 16:10:14.354442"]]
-   (5.0ms)  commit transaction
-   (4.0ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL PRIMARY KEY)
+   (0.8ms)  SELECT sqlite_version(*)
+   (6.7ms)  CREATE TABLE "users" ("id" INTEGER PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 'f')
+   (8.7ms)  CREATE TABLE "ar_internal_metadata" ("key" varchar NOT NULL PRIMARY KEY, "value" varchar, "created_at" datetime NOT NULL, "updated_at" datetime NOT NULL)
   ActiveRecord::InternalMetadata Load (0.2ms)  SELECT  "ar_internal_metadata".* FROM "ar_internal_metadata" WHERE "ar_internal_metadata"."key" = ? LIMIT ?  [["key", "environment"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-   (0.1ms)  begin transaction
-  SQL (0.3ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d36112"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (7.0ms)  commit transaction
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d37517"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (6.5ms)  commit transaction
-Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d36112"}
-  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d36112"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "email" = ?, "name" = ?, "permissions" = ?, "organisation_slug" = ?, "organisation_content_id" = ? WHERE "users"."id" = ?  [["email", "user@domain.com"], ["name", "Joshua Marshall"], ["permissions", "---\n- signin\n- new permission\n"], ["organisation_slug", "justice-league"], ["organisation_content_id", "aae1319e-5788-4677-998c-f1a53af528d0"], ["id", 1]]
-   (4.5ms)  commit transaction
-Completed 200 OK in 10ms (ActiveRecord: 5.0ms)
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 1], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-  SQL (0.3ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d39339"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (5.4ms)  commit transaction
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d39904"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (9.3ms)  commit transaction
-Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d39339"}
-  Rendering /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
-  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.3ms)
-Completed 403 Forbidden in 12ms (Views: 11.2ms | ActiveRecord: 0.0ms)
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d34286"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (4.7ms)  commit transaction
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d38224"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (7.5ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d34286"}
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d34286"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 5]]
-   (4.9ms)  commit transaction
-Completed 200 OK in 8ms (ActiveRecord: 5.3ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 5], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d3831"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (4.9ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d37902"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (3.9ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"nonexistent-user"}
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "nonexistent-user"], ["LIMIT", 1]]
-Completed 200 OK in 1ms (ActiveRecord: 0.1ms)
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d36644"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (3.8ms)  commit transaction
+  SQL (0.2ms)  INSERT INTO "ar_internal_metadata" ("key", "value", "created_at", "updated_at") VALUES (?, ?, ?, ?)  [["key", "environment"], ["value", "test"], ["created_at", "2018-01-23 17:16:49.799868"], ["updated_at", "2018-01-23 17:16:49.799868"]]
+   (4.2ms)  commit transaction
+   (6.1ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL PRIMARY KEY)
+  ActiveRecord::InternalMetadata Load (0.1ms)  SELECT  "ar_internal_metadata".* FROM "ar_internal_metadata" WHERE "ar_internal_metadata"."key" = ? LIMIT ?  [["key", "environment"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d321"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (4.9ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d36644"}
-  Rendering /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
-  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.0ms)
-Completed 403 Forbidden in 1ms (Views: 0.7ms | ActiveRecord: 0.0ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
+   (0.0ms)  commit transaction
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "user@example.com"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
   SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions", "organisation_slug", "organisation_content_id", "disabled") VALUES (?, ?, ?, ?, ?, ?, ?)  [["name", "A Name"], ["uid", "asd"], ["email", "user@example.com"], ["permissions", "---\n- signin\n"], ["organisation_slug", "hmrc"], ["organisation_content_id", "67a2b78d-eee3-45b3-80e2-792e7f71cecc"], ["disabled", nil]]
-   (4.6ms)  commit transaction
+   (6.7ms)  commit transaction
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:14 +0000
-Processing by ExampleController#restricted as JSON
-Completed   in 25ms (ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:15 +0000
-Processing by ExampleController#restricted as JSON
-  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions", "disabled") VALUES (?, ?, ?, ?, ?)  [["name", "Test User"], ["uid", "integration-uid"], ["email", "test@example-client.com"], ["permissions", "---\n- signin\n"], ["disabled", nil]]
-   (4.6ms)  commit transaction
-  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
-  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
    (0.0ms)  commit transaction
-  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 12]]
-   (5.2ms)  commit transaction
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:50 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 6ms (ActiveRecord: 0.0ms)
+Started GET "/" for 127.0.0.1 at 2018-01-23 17:16:50 +0000
+Processing by ExampleController#index as HTML
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 118ms (Views: 1.3ms | ActiveRecord: 11.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:15 +0000
-Processing by ExampleController#restricted as JSON
-Completed   in 38ms (ActiveRecord: 0.0ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:10:15 +0000
-Processing by ExampleController#this_requires_signin_permission as JSON
+Completed 200 OK in 3ms (Views: 2.8ms | ActiveRecord: 0.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:50 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms (ActiveRecord: 0.0ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:50 +0000
+Started GET "/auth/gds/callback?code=a9ce83eca750a3acb886bd980109a7460030ba4ae34811860a6af12dc56d1fee&state=631641b49f5c4cc84f372f0c2d278a1ffe52846f9a5720b2" for 127.0.0.1 at 2018-01-23 17:16:50 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"a9ce83eca750a3acb886bd980109a7460030ba4ae34811860a6af12dc56d1fee", "state"=>"631641b49f5c4cc84f372f0c2d278a1ffe52846f9a5720b2"}
+Authenticating with gds_sso strategy
   User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-  CACHE User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
-  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
-  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Test User"], ["uid", "integration-uid"], ["email", "test@example-client.com"], ["permissions", "---\n- signin\n"]]
+   (5.3ms)  commit transaction
+   (0.0ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 2]]
+   (4.2ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 16ms (ActiveRecord: 10.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:50 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.4ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 72ms (Views: 0.3ms | ActiveRecord: 0.9ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:15 +0000
+Completed 200 OK in 3ms (Views: 0.4ms | ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:50 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:15 +0000
-Processing by ExampleController#restricted as HTML
-Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:15 +0000
-Started GET "/auth/gds/callback?code=f5ded92b93b4f071fc088ae57afcf1138dcedb5c3976979bcae3d722f10ae687&state=b9df4a261d6cb6e4ecee2aacaf7259b64da062bb9af4b7e1" for 127.0.0.1 at 2017-12-15 16:10:15 +0000
+Completed   in 2ms (ActiveRecord: 0.0ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:50 +0000
+Started GET "/auth/gds/callback?code=d030ff31e907ea07c245d2f883f3473e09d2585af84690b451ffb8a971e3229d&state=637cebcfea31685c91f69fc6a5f6fd5d5412fa6bfd0778ec" for 127.0.0.1 at 2018-01-23 17:16:50 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"f5ded92b93b4f071fc088ae57afcf1138dcedb5c3976979bcae3d722f10ae687", "state"=>"b9df4a261d6cb6e4ecee2aacaf7259b64da062bb9af4b7e1"}
+  Parameters: {"code"=>"d030ff31e907ea07c245d2f883f3473e09d2585af84690b451ffb8a971e3229d", "state"=>"637cebcfea31685c91f69fc6a5f6fd5d5412fa6bfd0778ec"}
 Authenticating with gds_sso strategy
-  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "disabled" = ? WHERE "users"."id" = ?  [["disabled", "f"], ["id", 12]]
-   (4.9ms)  commit transaction
+  User Load (0.4ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 9ms (ActiveRecord: 5.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:15 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.5ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:50 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:15 +0000
+Completed 200 OK in 2ms (Views: 0.4ms | ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:50 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:15 +0000
-Started GET "/auth/gds/callback?code=a8d048d6270e95208404f1a8a3ae299d00930ff3a4b343c28de3486d4e9965da&state=850b44eedf87925a6d812574c69c75ad94c362c527c8eca8" for 127.0.0.1 at 2017-12-15 16:10:15 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:50 +0000
+Started GET "/auth/gds/callback?code=8317ae69e828dac16c0aa7a8a19e18e6e1914ce3320e1b463c71dc37e3b26b03&state=fb7236519484b53a53e0cca046b58a32413538aaec613a58" for 127.0.0.1 at 2018-01-23 17:16:50 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"a8d048d6270e95208404f1a8a3ae299d00930ff3a4b343c28de3486d4e9965da", "state"=>"850b44eedf87925a6d812574c69c75ad94c362c527c8eca8"}
+  Parameters: {"code"=>"8317ae69e828dac16c0aa7a8a19e18e6e1914ce3320e1b463c71dc37e3b26b03", "state"=>"fb7236519484b53a53e0cca046b58a32413538aaec613a58"}
 Authenticating with gds_sso strategy
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 3ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:15 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:50 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:10:15 +0000
+Completed 200 OK in 3ms (Views: 0.6ms | ActiveRecord: 0.3ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:50 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:15 +0000
-Started GET "/auth/gds/callback?code=befaee4db347b846583ca1454cb9faa062914fd6eff3b94ba77f4de056f72269&state=8901546407ca2f8be3b53cbcbcfb33b16100a42bf3a7973d" for 127.0.0.1 at 2017-12-15 16:10:15 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:50 +0000
+Started GET "/auth/gds/callback?code=d2d3651c07e4c501c7fa73f24ebeb494024174f199ef51ac56c3a345725f663a&state=e0fc93d6db0a7f169dec35d354fe994531ca8b9ca4d1965b" for 127.0.0.1 at 2018-01-23 17:16:51 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"befaee4db347b846583ca1454cb9faa062914fd6eff3b94ba77f4de056f72269", "state"=>"8901546407ca2f8be3b53cbcbcfb33b16100a42bf3a7973d"}
+  Parameters: {"code"=>"d2d3651c07e4c501c7fa73f24ebeb494024174f199ef51ac56c3a345725f663a", "state"=>"e0fc93d6db0a7f169dec35d354fe994531ca8b9ca4d1965b"}
 Authenticating with gds_sso strategy
   User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
+   (0.0ms)  begin transaction
+   (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/this_requires_signin_permission
-Completed 302 Found in 4ms (ActiveRecord: 0.5ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:10:15 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:51 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:10:15 +0000
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:51 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:15 +0000
-Started GET "/auth/gds/callback?code=cbac07f5dd801174400136e10ea6fc9712f6d227dffca8b0c809fad93a824c11&state=5aa98dd1424b062d3feccf2f696ea94b91f4ce19dff38bac" for 127.0.0.1 at 2017-12-15 16:10:16 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:51 +0000
+Started GET "/auth/gds/callback?code=369c086cb730b105a20645be2666f4c210a5bf392f9fe49c358f219875fca26a&state=9091de2512356f92ef1d6317200c0b7f0865005152d11825" for 127.0.0.1 at 2018-01-23 17:16:51 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"cbac07f5dd801174400136e10ea6fc9712f6d227dffca8b0c809fad93a824c11", "state"=>"5aa98dd1424b062d3feccf2f696ea94b91f4ce19dff38bac"}
+  Parameters: {"code"=>"369c086cb730b105a20645be2666f4c210a5bf392f9fe49c358f219875fca26a", "state"=>"9091de2512356f92ef1d6317200c0b7f0865005152d11825"}
 Authenticating with gds_sso strategy
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
+  User Load (0.9ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
    (0.1ms)  commit transaction
 Redirected to http://www.example-client.com/this_requires_signin_permission
-Completed 302 Found in 3ms (ActiveRecord: 0.3ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2017-12-15 16:10:16 +0000
+Completed 302 Found in 6ms (ActiveRecord: 1.0ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:51 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
-  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
-  Rendering text template
-  Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.3ms)
-Started GET "/" for 127.0.0.1 at 2017-12-15 16:10:16 +0000
-Processing by ExampleController#index as HTML
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 0ms (Views: 0.2ms | ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:16 +0000
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:51 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:16 +0000
-Started GET "/auth/gds/callback?code=7d50fd451e9e4e045b7c86242048c2181978773ca7cac66c0f6a7257cd1e9de1&state=f1b6900e741172fff6045bfa88e21b48f8789370024ad112" for 127.0.0.1 at 2017-12-15 16:10:16 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:51 +0000
+Started GET "/auth/gds/callback?code=967d35ddd16ab6835e05e15507d4b3de38df3192fc9d4dbaaff38a0a854a8e2d&state=c03637a006789a2fa9cf52aeae57e39236406c68ddc5d010" for 127.0.0.1 at 2018-01-23 17:16:51 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"7d50fd451e9e4e045b7c86242048c2181978773ca7cac66c0f6a7257cd1e9de1", "state"=>"f1b6900e741172fff6045bfa88e21b48f8789370024ad112"}
+  Parameters: {"code"=>"967d35ddd16ab6835e05e15507d4b3de38df3192fc9d4dbaaff38a0a854a8e2d", "state"=>"c03637a006789a2fa9cf52aeae57e39236406c68ddc5d010"}
 Authenticating with gds_sso strategy
   User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
 Completed 302 Found in 3ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:16 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:51 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.5ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:16 +0000
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:21:51 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:16 +0000
-Started GET "/auth/gds/callback?code=d8fcfe55fe5094fbd45230eee74e80413f438b0671296c4d8222677fc6300532&state=e9d54a09cb42dba43c509882b54fc82f47fb0f145711ad9f" for 127.0.0.1 at 2017-12-15 16:10:16 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-24 13:21:51 +0000
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:51 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms (ActiveRecord: 0.0ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:51 +0000
+Started GET "/auth/gds/callback?code=19ec16425236a08a3f6864245e6f1a46f6dcefbdbc582932553c5dc8deddf32a&state=8b8fbe1cc8c344e535a10791e6ffe541be6b3d0ee1e86538" for 127.0.0.1 at 2018-01-23 17:16:51 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"d8fcfe55fe5094fbd45230eee74e80413f438b0671296c4d8222677fc6300532", "state"=>"e9d54a09cb42dba43c509882b54fc82f47fb0f145711ad9f"}
+  Parameters: {"code"=>"19ec16425236a08a3f6864245e6f1a46f6dcefbdbc582932553c5dc8deddf32a", "state"=>"8b8fbe1cc8c344e535a10791e6ffe541be6b3d0ee1e86538"}
 Authenticating with gds_sso strategy
   User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
+   (0.3ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 3ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:16 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.7ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:51 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
+  User Load (0.4ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 12]]
-   (12.5ms)  commit transaction
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:16 +0000
-Processing by ExampleController#restricted as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
-Authenticating with gds_sso strategy
-Completed   in 1ms (ActiveRecord: 0.2ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:16 +0000
-Started GET "/auth/gds/callback?code=742d2c681d678f953cb1c5afe8acfb2c828de14f5c889c6e8b723a8ed5d750d3&state=b2ae84e608c4650a404e0ce83ccc50e90e526ef1fdfe4cfd" for 127.0.0.1 at 2017-12-15 16:10:16 +0000
-Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"742d2c681d678f953cb1c5afe8acfb2c828de14f5c889c6e8b723a8ed5d750d3", "state"=>"b2ae84e608c4650a404e0ce83ccc50e90e526ef1fdfe4cfd"}
-Authenticating with gds_sso strategy
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
-   (0.0ms)  begin transaction
-  SQL (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 12]]
-   (4.3ms)  commit transaction
-Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 8ms (ActiveRecord: 4.8ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:16 +0000
+Completed 200 OK in 2ms (Views: 0.4ms | ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:11:51 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:16 +0000
+Completed 200 OK in 2ms (Views: 0.2ms | ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:52 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:16 +0000
-Started GET "/auth/gds/callback?code=ec532eb71c260cbf44317bc4b12502438d8cb170ad64967a900ee920c1f71c06&state=66f60be1125a23cc018f5ffec9fc78a7a5b2962a84687f09" for 127.0.0.1 at 2017-12-15 16:10:17 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:52 +0000
+Started GET "/auth/gds/callback?code=297989a2ae99bb0eedc98eaaf32e038d0106646ca1d313101343ca9a7dd95b45&state=40718a3fec89954747b948a1f20ffd3eb59137aaa0dd098c" for 127.0.0.1 at 2018-01-23 17:16:52 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"ec532eb71c260cbf44317bc4b12502438d8cb170ad64967a900ee920c1f71c06", "state"=>"66f60be1125a23cc018f5ffec9fc78a7a5b2962a84687f09"}
+  Parameters: {"code"=>"297989a2ae99bb0eedc98eaaf32e038d0106646ca1d313101343ca9a7dd95b45", "state"=>"40718a3fec89954747b948a1f20ffd3eb59137aaa0dd098c"}
 Authenticating with gds_sso strategy
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
+  User Load (0.4ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 3ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:17 +0000
-Processing by ExampleController#restricted as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
-  Rendering text template
-  Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:05:17 +0000
+Completed 302 Found in 4ms (ActiveRecord: 0.5ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:52 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:17 +0000
+Completed 200 OK in 2ms (Views: 0.4ms | ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:21:52 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:17 +0000
-Started GET "/auth/gds/callback?code=1a4f389bfdc8feca88cc35d25a4a70f60a6a47200555b63fcebbc8d0944de856&state=875e8071d7e77065fc9ceb811f1a8e146fcd0342a42cc4f3" for 127.0.0.1 at 2017-12-15 16:10:17 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-24 13:21:52 +0000
+Started GET "/auth/gds/callback?code=54377010f1a9c07a15d4423dd035d0c1c5c321cf7d61a0297accb5fc4d79c593&state=a62d8da933475177c35f7d4a2db72612b9ef4d78b3498df8" for 127.0.0.1 at 2018-01-24 13:21:52 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"1a4f389bfdc8feca88cc35d25a4a70f60a6a47200555b63fcebbc8d0944de856", "state"=>"875e8071d7e77065fc9ceb811f1a8e146fcd0342a42cc4f3"}
+  Parameters: {"code"=>"54377010f1a9c07a15d4423dd035d0c1c5c321cf7d61a0297accb5fc4d79c593", "state"=>"a62d8da933475177c35f7d4a2db72612b9ef4d78b3498df8"}
 Authenticating with gds_sso strategy
-  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+  User Load (0.4ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
+   (0.2ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 3ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:17 +0000
+Completed 302 Found in 7ms (ActiveRecord: 0.7ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-24 13:21:52 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
+  User Load (0.5ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:15:17 +0000
+Completed 200 OK in 3ms (Views: 0.3ms | ActiveRecord: 0.5ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:52 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-16 12:15:17 +0000
-Started GET "/auth/gds/callback?code=6ea088b23d69d2e9d374ccc4aef9bc6c33e50cd02a62177b26346533b48cd335&state=3fc0e0e7ade26fb71aba89bad4a850e0e987df88b4e5dacd" for 127.0.0.1 at 2017-12-16 12:15:17 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:52 +0000
+Started GET "/auth/gds/callback?code=adbddef8e27bcdb699d4e7da6151954aab434834ee9a31e9f488b25a6889fdbe&state=d829ac64295a4ec3ae1a8829e62b4e631a6702438523fe4e" for 127.0.0.1 at 2018-01-23 17:16:52 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"6ea088b23d69d2e9d374ccc4aef9bc6c33e50cd02a62177b26346533b48cd335", "state"=>"3fc0e0e7ade26fb71aba89bad4a850e0e987df88b4e5dacd"}
+  Parameters: {"code"=>"adbddef8e27bcdb699d4e7da6151954aab434834ee9a31e9f488b25a6889fdbe", "state"=>"d829ac64295a4ec3ae1a8829e62b4e631a6702438523fe4e"}
 Authenticating with gds_sso strategy
-  User Load (0.4ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+  User Load (1.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
+   (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 4ms (ActiveRecord: 0.5ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:15:17 +0000
+Completed 302 Found in 5ms (ActiveRecord: 1.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:52 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
+  User Load (0.8ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
-  Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:17 +0000
+  Rendered text template (0.1ms)
+Completed 200 OK in 8ms (Views: 1.3ms | ActiveRecord: 0.8ms)
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+  SQL (0.6ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 2]]
+   (7.1ms)  commit transaction
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:52 +0000
 Processing by ExampleController#restricted as HTML
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
 Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-15 16:10:17 +0000
-Started GET "/auth/gds/callback?code=98f194c39b7853e8c18b522af5b17f809f06e3a344ef370cecb8249bbc5f552a&state=cc17962d6edf7f3b6d5479bcfa836c9806fbb0787b43c545" for 127.0.0.1 at 2017-12-15 16:10:17 +0000
+Completed   in 2ms (ActiveRecord: 0.2ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2018-01-23 17:16:52 +0000
+Started GET "/auth/gds/callback?code=4156d050f22f9369523ef5c16050fe4010c77b30a5e6705de17cdd6862d644ca&state=9d23eeb323692c3ab4744a7cd99c4a2056bd77dfad6fcffd" for 127.0.0.1 at 2018-01-23 17:16:52 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"98f194c39b7853e8c18b522af5b17f809f06e3a344ef370cecb8249bbc5f552a", "state"=>"cc17962d6edf7f3b6d5479bcfa836c9806fbb0787b43c545"}
+  Parameters: {"code"=>"4156d050f22f9369523ef5c16050fe4010c77b30a5e6705de17cdd6862d644ca", "state"=>"9d23eeb323692c3ab4744a7cd99c4a2056bd77dfad6fcffd"}
 Authenticating with gds_sso strategy
-  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+  User Load (0.6ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
-   (0.0ms)  commit transaction
+   (0.6ms)  commit transaction
+   (0.0ms)  begin transaction
+  SQL (0.3ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 2]]
+   (9.2ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 3ms (ActiveRecord: 0.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-15 16:10:17 +0000
+Completed 302 Found in 18ms (ActiveRecord: 10.9ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:52 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2017-12-16 12:15:17 +0000
-Processing by ExampleController#restricted as HTML
-Authenticating with gds_sso strategy
-Completed   in 1ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2017-12-16 12:15:17 +0000
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.3ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:52 +0000
+Processing by ExampleController#restricted as JSON
+Completed   in 36ms (ActiveRecord: 0.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:52 +0000
+Processing by ExampleController#restricted as JSON
+Completed   in 16ms (ActiveRecord: 0.0ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2018-01-23 17:16:53 +0000
+Processing by ExampleController#this_requires_signin_permission as JSON
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "disabled" = ? WHERE "users"."id" = ?  [["disabled", nil], ["id", 2]]
+   (6.6ms)  commit transaction
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+  Rendering text template
+  Rendered text template (0.0ms)
+Completed 200 OK in 112ms (Views: 0.3ms | ActiveRecord: 7.8ms)
+Started GET "/restricted" for 127.0.0.1 at 2018-01-23 17:16:53 +0000
+Processing by ExampleController#restricted as JSON
+  User Load (0.3ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+   (0.1ms)  commit transaction
+  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+  Rendering text template
+  Rendered text template (0.0ms)
+Completed 200 OK in 77ms (Views: 0.3ms | ActiveRecord: 0.8ms)
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d35183"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (8.1ms)  commit transaction
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d3850"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (6.1ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"nonexistent-user"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "nonexistent-user"], ["LIMIT", 1]]
+Completed 200 OK in 2ms (ActiveRecord: 0.1ms)
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d31284"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (6.4ms)  commit transaction
+   (0.0ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d379"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (5.3ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"a1s2d31284"}
+  Rendering /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
+  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.5ms)
+Completed 403 Forbidden in 9ms (Views: 8.8ms | ActiveRecord: 0.0ms)
+   (0.1ms)  begin transaction
+  SQL (0.3ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d3661"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (6.5ms)  commit transaction
+   (0.0ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d31303"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (5.8ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"a1s2d3661"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d3661"], ["LIMIT", 1]]
+   (0.1ms)  begin transaction
+  SQL (0.4ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 7]]
+   (7.0ms)  commit transaction
+Completed 200 OK in 10ms (ActiveRecord: 7.6ms)
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 7], ["LIMIT", 1]]
+   (0.0ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d395"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (5.0ms)  commit transaction
+   (0.0ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d36582"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (5.8ms)  commit transaction
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d395"}
+  Rendering /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
+  Rendered /var/lib/jenkins/workspace/gds-sso_master-7MNGHJETCC7W4ACW54GEWCZ7RU2E7EW7NZYEBGCKG2QG3YLPM53Q/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.0ms)
+Completed 403 Forbidden in 1ms (Views: 0.5ms | ActiveRecord: 0.0ms)
+   (0.1ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d3568"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (6.0ms)  commit transaction
+   (0.0ms)  begin transaction
+  SQL (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d31082"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (6.0ms)  commit transaction
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d3568"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d3568"], ["LIMIT", 1]]
+   (0.0ms)  begin transaction
+  SQL (0.2ms)  UPDATE "users" SET "email" = ?, "name" = ?, "permissions" = ?, "organisation_slug" = ?, "organisation_content_id" = ? WHERE "users"."id" = ?  [["email", "user@domain.com"], ["name", "Joshua Marshall"], ["permissions", "---\n- signin\n- new permission\n"], ["organisation_slug", "justice-league"], ["organisation_content_id", "aae1319e-5788-4677-998c-f1a53af528d0"], ["id", 11]]
+   (6.1ms)  commit transaction
+Completed 200 OK in 9ms (ActiveRecord: 6.4ms)
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 11], ["LIMIT", 1]]