gds-sso 16.0.1 → 16.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 14cc3ecc61cecb2be99008673ba2852ce4a38385fc1721a420d9452eedcad495
-  data.tar.gz: 629e3d7a45d9385ef258dffd115167e0ffa36a8a51d98309c5323a19ca3a772d
+  metadata.gz: 4104bc40db9904a03de0b700f1136b49282191e69bee00222844cb7cb2063bef
+  data.tar.gz: 7dc476f342219a188e0441ec8afacac71d7a80fa6797d09831d21538489a3bb9
 SHA512:
-  metadata.gz: 3b8e46bb3acb7a9105001c7f8ec39f0914f60a89d9592df1f53c901b172bc575d584a7ff6019f6ebe4d7e8781029dcbdc5b71ecba0c8585e9697e4830ccdcf25
-  data.tar.gz: e046ad091e5430b6ed6ba5011e5498723b943d7a7dfd1027cb346e15b7dbf14e3e083707aaa7646418c53530360fc755a2903b74bfc3662127ad553cbc446b1f
+  metadata.gz: 05b3c93e8a78e7d485ca1bb1464d22dc0c9e16a74b770c5b1b4f8f7abf656f5782edbaa8e63e3c92143df6c00bc14a26bf5b24fa56289e8f84fc1d5b25103132
+  data.tar.gz: 6d74861d444d1ee8021b7bb1cb4b8ec135fdba5c315b81c609438d593b5f6bf17f4756c0d1acb41a0338d0aedf624cdc07e07640bebceda9bab22002594d937f

data/lib/gds-sso.rb

@@ -27,6 +27,8 @@ module GDS
       # TODO - check this one - Stolen from Devise because it looked sensible...
       config.before_eager_load(&:reload_routes!)
 
+      OmniAuth.config.allowed_request_methods = %i[post get]
+
       config.app_middleware.use ::OmniAuth::Builder do
         next if GDS::SSO::Config.api_only
 

data/lib/gds-sso/version.rb

@@ -1,5 +1,5 @@
 module GDS
   module SSO
-    VERSION = "16.0.1".freeze
+    VERSION = "16.0.2".freeze
   end
 end

data/spec/internal/log/test.log

@@ -1,191 +1,190 @@
    (0.1ms)  DROP TABLE IF EXISTS "users"
    (0.9ms)  SELECT sqlite_version(*)
-   (7.4ms)  CREATE TABLE "users" ("id" integer PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 'f')
-   (6.6ms)  CREATE TABLE "ar_internal_metadata" ("key" varchar NOT NULL PRIMARY KEY, "value" varchar, "created_at" datetime NOT NULL, "updated_at" datetime NOT NULL)
-  ActiveRecord::InternalMetadata Load (0.1ms)  SELECT  "ar_internal_metadata".* FROM "ar_internal_metadata" WHERE "ar_internal_metadata"."key" = ? LIMIT ?  [["key", "environment"], ["LIMIT", 1]]
+   (6.2ms)  CREATE TABLE "users" ("id" integer PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 'f')
+   (3.8ms)  CREATE TABLE "ar_internal_metadata" ("key" varchar NOT NULL PRIMARY KEY, "value" varchar, "created_at" datetime NOT NULL, "updated_at" datetime NOT NULL)
+  ActiveRecord::InternalMetadata Load (0.2ms)  SELECT  "ar_internal_metadata".* FROM "ar_internal_metadata" WHERE "ar_internal_metadata"."key" = ? LIMIT ?  [["key", "environment"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-  ActiveRecord::InternalMetadata Create (0.2ms)  INSERT INTO "ar_internal_metadata" ("key", "value", "created_at", "updated_at") VALUES (?, ?, ?, ?)  [["key", "environment"], ["value", "test"], ["created_at", "2021-06-10 10:30:26.783208"], ["updated_at", "2021-06-10 10:30:26.783208"]]
-   (6.3ms)  commit transaction
-   (6.5ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL PRIMARY KEY)
+  ActiveRecord::InternalMetadata Create (0.3ms)  INSERT INTO "ar_internal_metadata" ("key", "value", "created_at", "updated_at") VALUES (?, ?, ?, ?)  [["key", "environment"], ["value", "test"], ["created_at", "2021-06-24 15:07:07.417855"], ["updated_at", "2021-06-24 15:07:07.417855"]]
+   (13.6ms)  commit transaction
+   (14.2ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL PRIMARY KEY)
   ActiveRecord::InternalMetadata Load (0.1ms)  SELECT  "ar_internal_metadata".* FROM "ar_internal_metadata" WHERE "ar_internal_metadata"."key" = ? LIMIT ?  [["key", "environment"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
    (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d37256"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (6.9ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d34140"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (7.7ms)  commit transaction
    (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d35608"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (5.9ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d33438"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (4.9ms)  commit transaction
 Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d37256"}
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d37256"], ["LIMIT", 1]]
+  Parameters: {"uid"=>"a1s2d34140"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d34140"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
   User Update (0.2ms)  UPDATE "users" SET "email" = ?, "name" = ?, "permissions" = ?, "organisation_slug" = ?, "organisation_content_id" = ? WHERE "users"."id" = ?  [["email", "user@domain.com"], ["name", "Joshua Marshall"], ["permissions", "---\n- signin\n- new permission\n"], ["organisation_slug", "justice-league"], ["organisation_content_id", "aae1319e-5788-4677-998c-f1a53af528d0"], ["id", 1]]
-   (4.4ms)  commit transaction
-Completed 200 OK in 7ms (ActiveRecord: 4.7ms)
+   (5.4ms)  commit transaction
+Completed 200 OK in 8ms (ActiveRecord: 5.7ms)
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 1], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d39156"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (6.0ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d35903"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (4.6ms)  commit transaction
    (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d31968"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (5.9ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d37660"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (3.8ms)  commit transaction
 Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d39156"}
+  Parameters: {"uid"=>"a1s2d35903"}
   Rendering /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
   Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
   Rendered /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.1ms)
   Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
-Completed 403 Forbidden in 5ms (Views: 4.3ms | ActiveRecord: 0.0ms)
+Completed 403 Forbidden in 4ms (Views: 4.2ms | ActiveRecord: 0.0ms)
    (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d31875"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (6.3ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d32580"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (3.9ms)  commit transaction
    (0.0ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d3917"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (6.2ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d3720"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (5.3ms)  commit transaction
 Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d31875"}
+  Parameters: {"uid"=>"a1s2d32580"}
   Rendering /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
   Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
   Rendered /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.1ms)
   Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
 Completed 403 Forbidden in 1ms (Views: 0.5ms | ActiveRecord: 0.0ms)
    (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d38749"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (4.5ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d36052"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (4.0ms)  commit transaction
    (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d39755"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (4.9ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d38969"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (3.8ms)  commit transaction
 Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d38749"}
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d38749"], ["LIMIT", 1]]
+  Parameters: {"uid"=>"a1s2d36052"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d36052"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
   User Update (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 7]]
-   (4.6ms)  commit transaction
-Completed 200 OK in 6ms (ActiveRecord: 4.8ms)
+   (5.6ms)  commit transaction
+Completed 200 OK in 7ms (ActiveRecord: 5.8ms)
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 7], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d35482"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (6.4ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d31908"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (5.3ms)  commit transaction
    (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d37236"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (5.9ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d33257"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (3.8ms)  commit transaction
 Processing by Api::UserController#reauth as HTML
   Parameters: {"uid"=>"nonexistent-user"}
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "nonexistent-user"], ["LIMIT", 1]]
 Completed 200 OK in 1ms (ActiveRecord: 0.1ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "user@example.com"], ["LIMIT", 1]]
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "dummyapiuser@domain.com"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions", "organisation_slug", "organisation_content_id", "disabled") VALUES (?, ?, ?, ?, ?, ?, ?)  [["name", "A Name"], ["uid", "asd"], ["email", "user@example.com"], ["permissions", "---\n- signin\n"], ["organisation_slug", "hmrc"], ["organisation_content_id", "67a2b78d-eee3-45b3-80e2-792e7f71cecc"], ["disabled", nil]]
-   (5.8ms)  commit transaction
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Dummy API user created by gds-sso"], ["uid", "9871"], ["email", "dummyapiuser@domain.com"], ["permissions", "---\n- signin\n"]]
+   (4.0ms)  commit transaction
    (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:27 +0000
+  User Update (0.1ms)  UPDATE "users" SET "permissions" = ? WHERE "users"."id" = ?  [["permissions", "---\n- signin\n- extra_permission\n"], ["id", 11]]
+   (5.1ms)  commit transaction
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 4ms (ActiveRecord: 0.0ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:27 +0000
-Processing by ExampleController#this_requires_signin_permission as JSON
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
+Started GET "/auth/gds/callback?code=hS54I-syiSt6cTUJlW_JPmtwB3CHImteLUO8RpWSyLg&state=33bd83f95c9e0413080a3a48934234773209ea349da1dab0" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"hS54I-syiSt6cTUJlW_JPmtwB3CHImteLUO8RpWSyLg", "state"=>"33bd83f95c9e0413080a3a48934234773209ea349da1dab0"}
+Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions", "disabled") VALUES (?, ?, ?, ?, ?)  [["name", "Test User"], ["uid", "integration-uid"], ["email", "test@example-client.com"], ["permissions", "---\n- signin\n"], ["disabled", nil]]
-   (7.4ms)  commit transaction
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
-  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
-  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Test User"], ["uid", "integration-uid"], ["email", "test@example-client.com"], ["permissions", "---\n- signin\n"]]
+   (8.8ms)  commit transaction
    (0.0ms)  begin transaction
   User Update (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 12]]
-   (6.1ms)  commit transaction
+   (6.4ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 19ms (ActiveRecord: 15.9ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 160ms (Views: 0.8ms | ActiveRecord: 14.4ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:27 +0000
-Processing by ExampleController#restricted as JSON
-Completed   in 109ms (ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:27 +0000
-Processing by ExampleController#restricted as JSON
-Completed   in 14ms (ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:27 +0000
-Processing by ExampleController#restricted as JSON
+Completed 200 OK in 2ms (Views: 0.7ms | ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms (ActiveRecord: 0.0ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
+Started GET "/auth/gds/callback?code=iI9yA-NJQE8Jeix0k9L51l1OUnBdo8ppBZxs2WuPoxI&state=374306e1b514a61e5d1b460852b53437b7290d8f83a0f560" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
+Processing by AuthenticationsController#callback as HTML
+  Parameters: {"code"=>"iI9yA-NJQE8Jeix0k9L51l1OUnBdo8ppBZxs2WuPoxI", "state"=>"374306e1b514a61e5d1b460852b53437b7290d8f83a0f560"}
+Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
-  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
-  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
-  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 2ms (ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 6ms (Views: 0.2ms | ActiveRecord: 0.5ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:27 +0000
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:27 +0000
-Started GET "/auth/gds/callback?code=jF_SQ2_ish9Qv0VB_UitUoug5h0ETt4bK4BWGKjfZyg&state=64e9bbffa3bd2370491170a2e47f9c854825df7f2663e0d4" for 127.0.0.1 at 2021-06-10 10:30:27 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
+Started GET "/auth/gds/callback?code=t3mrKoVAMS2rD6Ez3fjF2mfiY3f4sz9d3mGpR4g6pK8&state=84ffe1ce4530b34ac6db32e33d0f444f482424de90ed5d71" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"jF_SQ2_ish9Qv0VB_UitUoug5h0ETt4bK4BWGKjfZyg", "state"=>"64e9bbffa3bd2370491170a2e47f9c854825df7f2663e0d4"}
+  Parameters: {"code"=>"t3mrKoVAMS2rD6Ez3fjF2mfiY3f4sz9d3mGpR4g6pK8", "state"=>"84ffe1ce4530b34ac6db32e33d0f444f482424de90ed5d71"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-  User Update (0.2ms)  UPDATE "users" SET "disabled" = ? WHERE "users"."id" = ?  [["disabled", "f"], ["id", 12]]
-   (8.5ms)  commit transaction
-   (0.1ms)  begin transaction
+   (0.0ms)  commit transaction
+   (0.0ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 12ms (ActiveRecord: 9.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:27 +0000
+Completed 302 Found in 2ms (ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
+  Rendering text template
+  Rendered text template (0.0ms)
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
+Started GET "/" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
+Processing by ExampleController#index as HTML
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.2ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:27 +0000
+Completed 200 OK in 0ms (Views: 0.1ms | ActiveRecord: 0.0ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:27 +0000
-Started GET "/auth/gds/callback?code=hBZaqSN91kBu98XpYDOwJ69NLFqKGc-4_TFRUBTd_mw&state=8806c639e9bcd12b516f12ec248955b3630bc755ec4b2d40" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
+Started GET "/auth/gds/callback?code=GNWIz8UTM5Wo6E9H23HUX9wBoj7UAe0Qd2KEMhe-a98&state=e0c053a82f5f90b4f08ae9ae008e599bcd852d6fbf2e4859" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"hBZaqSN91kBu98XpYDOwJ69NLFqKGc-4_TFRUBTd_mw", "state"=>"8806c639e9bcd12b516f12ec248955b3630bc755ec4b2d40"}
+  Parameters: {"code"=>"GNWIz8UTM5Wo6E9H23HUX9wBoj7UAe0Qd2KEMhe-a98", "state"=>"e0c053a82f5f90b4f08ae9ae008e599bcd852d6fbf2e4859"}
 Authenticating with gds_sso strategy
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-   (0.1ms)  commit transaction
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.0ms)  begin transaction
+   (0.0ms)  commit transaction
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/this_requires_signin_permission
-Completed 302 Found in 4ms (ActiveRecord: 0.4ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Completed 302 Found in 3ms (ActiveRecord: 0.3ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.1ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
-Started GET "/auth/gds/callback?code=bJv-HEe2eC9X_-jgPUxZASHtbrWzWomV1ODGqSwDZjw&state=60b1396bae1dba933a655d4c6b356d45a20ceea740c2030b" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
+Started GET "/auth/gds/callback?code=r_-Abr5jDEQw134XvX4IP-eug0Ok3rDC4GOstivRfEI&state=5c6b6c6a4b470b38c4366bb9272e03b72c5355ff56e541d8" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"bJv-HEe2eC9X_-jgPUxZASHtbrWzWomV1ODGqSwDZjw", "state"=>"60b1396bae1dba933a655d4c6b356d45a20ceea740c2030b"}
+  Parameters: {"code"=>"r_-Abr5jDEQw134XvX4IP-eug0Ok3rDC4GOstivRfEI", "state"=>"5c6b6c6a4b470b38c4366bb9272e03b72c5355ff56e541d8"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
@@ -194,25 +193,20 @@ Authenticating with gds_sso strategy
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/this_requires_signin_permission
 Completed 302 Found in 2ms (ActiveRecord: 0.2ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
-Processing by ExampleController#index as HTML
-  Rendering text template
-  Rendered text template (0.0ms)
-Completed 200 OK in 0ms (Views: 0.2ms | ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
-Started GET "/auth/gds/callback?code=gC8iRA497xK0TkQvEcg8DRlRD9k0w8qBkE9m_qpofSE&state=8e8a74a0073eca132ed33502b238a6cfae24a8240f26808e" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
+Started GET "/auth/gds/callback?code=tlRtnbAQaNdUZKWz6OG5VD6z9maEtek2GTclYpGuMmA&state=764d2347a8f8844675c442c308185ab4ce9823c74aa4ff32" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"gC8iRA497xK0TkQvEcg8DRlRD9k0w8qBkE9m_qpofSE", "state"=>"8e8a74a0073eca132ed33502b238a6cfae24a8240f26808e"}
+  Parameters: {"code"=>"tlRtnbAQaNdUZKWz6OG5VD6z9maEtek2GTclYpGuMmA", "state"=>"764d2347a8f8844675c442c308185ab4ce9823c74aa4ff32"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
@@ -220,43 +214,43 @@ Authenticating with gds_sso strategy
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 2ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Completed 302 Found in 2ms (ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-25 11:12:08 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
-Started GET "/auth/gds/callback?code=uC1_m3BWNbgEgv_fIyd_J41XniD3TMhDsofeYTaPoEY&state=f5e56d641dd87dbbd91737828000e2a66ccc4d703d5a2286" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-25 11:12:08 +0000
+Started GET "/auth/gds/callback?code=TX-Dit4R5ro4yCmL0bUfsLk616jpnnnUNsTdcabklwY&state=a1cb8699b7eb0d6de93b0caaba7f2ded57059c7abd1754d7" for 127.0.0.1 at 2021-06-25 11:12:08 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"uC1_m3BWNbgEgv_fIyd_J41XniD3TMhDsofeYTaPoEY", "state"=>"f5e56d641dd87dbbd91737828000e2a66ccc4d703d5a2286"}
+  Parameters: {"code"=>"TX-Dit4R5ro4yCmL0bUfsLk616jpnnnUNsTdcabklwY", "state"=>"a1cb8699b7eb0d6de93b0caaba7f2ded57059c7abd1754d7"}
 Authenticating with gds_sso strategy
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-   (0.1ms)  commit transaction
+   (0.0ms)  commit transaction
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 3ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Completed 302 Found in 2ms (ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-25 11:12:08 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 12ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
-Started GET "/auth/gds/callback?code=3ve19Uzmtbue5ui6zqJdR_9fqKnriB9lGa6z1E_MnZs&state=d2d227c0bcc729ea97f23dc39c5824e21ea96435635d9677" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
+Started GET "/auth/gds/callback?code=Gqyv0uClLzMapeInmPjLluoM_UT6zW41Ya_KhtIDYic&state=5ff2ff6ae1a3056f5bec86e1a0c4ee8222fafd644f3c8563" for 127.0.0.1 at 2021-06-24 15:07:08 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"3ve19Uzmtbue5ui6zqJdR_9fqKnriB9lGa6z1E_MnZs", "state"=>"d2d227c0bcc729ea97f23dc39c5824e21ea96435635d9677"}
+  Parameters: {"code"=>"Gqyv0uClLzMapeInmPjLluoM_UT6zW41Ya_KhtIDYic", "state"=>"5ff2ff6ae1a3056f5bec86e1a0c4ee8222fafd644f3c8563"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
@@ -265,25 +259,25 @@ Authenticating with gds_sso strategy
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
 Completed 302 Found in 2ms (ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:09 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-11 06:35:28 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-25 11:12:09 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-11 06:35:28 +0000
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-25 11:12:09 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:09 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
-Started GET "/auth/gds/callback?code=gRDEB2jbqdAAGGZAxaQlVWcYPlKb7Fob4ZrpW0gZUfQ&state=5a06fcd6a2e53d43e2cf0530a073a1b80547bbf16f1eb58f" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:09 +0000
+Started GET "/auth/gds/callback?code=yJtbB5CRnuDKnwe9XSLZaBCccckpGxEwQCM6OWw-eLk&state=815a41e2c550c84cfb667c409418f6eedfd0eb3690f93df1" for 127.0.0.1 at 2021-06-24 15:07:09 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"gRDEB2jbqdAAGGZAxaQlVWcYPlKb7Fob4ZrpW0gZUfQ", "state"=>"5a06fcd6a2e53d43e2cf0530a073a1b80547bbf16f1eb58f"}
+  Parameters: {"code"=>"yJtbB5CRnuDKnwe9XSLZaBCccckpGxEwQCM6OWw-eLk", "state"=>"815a41e2c550c84cfb667c409418f6eedfd0eb3690f93df1"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
@@ -292,390 +286,400 @@ Authenticating with gds_sso strategy
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
 Completed 302 Found in 2ms (ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:09 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-11 06:25:28 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-25 11:02:09 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:09 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
-Started GET "/auth/gds/callback?code=qb68Dd9gN_70qvVFw7-A1bKvXPzTbxW7H21AFDey_Mc&state=e4c792c21b21297cbea468219e5d3b97703230ae78d8e289" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:09 +0000
+Started GET "/auth/gds/callback?code=fKA2Ed_HU0kWKA324oPPtDfr3Sh8AII2cxTTaxm_3Ok&state=cd50d65c7480e61ab422172c435cdce1372489ce8e46cb23" for 127.0.0.1 at 2021-06-24 15:07:09 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"qb68Dd9gN_70qvVFw7-A1bKvXPzTbxW7H21AFDey_Mc", "state"=>"e4c792c21b21297cbea468219e5d3b97703230ae78d8e289"}
+  Parameters: {"code"=>"fKA2Ed_HU0kWKA324oPPtDfr3Sh8AII2cxTTaxm_3Ok", "state"=>"cd50d65c7480e61ab422172c435cdce1372489ce8e46cb23"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-   (0.1ms)  commit transaction
+   (0.0ms)  commit transaction
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 2ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Completed 302 Found in 2ms (ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:09 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-11 06:35:28 +0000
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
+   (0.0ms)  begin transaction
+  User Update (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 12]]
+   (5.7ms)  commit transaction
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:09 +0000
 Processing by ExampleController#restricted as HTML
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
 Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-11 06:35:28 +0000
-Started GET "/auth/gds/callback?code=1TVTeXCnPzzVBtZkj8vl2uioLmGV7FlVvsFnmAcwmwk&state=035bf0092b698f67501d896f38b3bef1e1627e63c1b4188e" for 127.0.0.1 at 2021-06-11 06:35:28 +0000
+Completed   in 1ms (ActiveRecord: 0.1ms)
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:09 +0000
+Started GET "/auth/gds/callback?code=NtUq4fRr1tLEey7AbWdRAZaxmWKwtrZBqo_o7_6d6m0&state=b099bae0a24fb8a0b53f057ab12b3c7c3828651b0b632c87" for 127.0.0.1 at 2021-06-24 15:07:09 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"1TVTeXCnPzzVBtZkj8vl2uioLmGV7FlVvsFnmAcwmwk", "state"=>"035bf0092b698f67501d896f38b3bef1e1627e63c1b4188e"}
+  Parameters: {"code"=>"NtUq4fRr1tLEey7AbWdRAZaxmWKwtrZBqo_o7_6d6m0", "state"=>"b099bae0a24fb8a0b53f057ab12b3c7c3828651b0b632c87"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
    (0.0ms)  begin transaction
-   (0.0ms)  commit transaction
+  User Update (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 12]]
+   (5.2ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 2ms (ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-11 06:35:28 +0000
+Completed 302 Found in 7ms (ActiveRecord: 5.6ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:09 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:09 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
-Started GET "/auth/gds/callback?code=7jIqjNEZcZB_myhQcBlUspxZz0naY5OkcFMkl4H-wDU&state=4d6498930ca82bc9ad804093f4683f0ce3f06bf3d85607c7" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
-Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"7jIqjNEZcZB_myhQcBlUspxZz0naY5OkcFMkl4H-wDU", "state"=>"4d6498930ca82bc9ad804093f4683f0ce3f06bf3d85607c7"}
-Authenticating with gds_sso strategy
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:09 +0000
+Processing by ExampleController#this_requires_signin_permission as JSON
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.0ms)  begin transaction
+  User Update (0.2ms)  UPDATE "users" SET "disabled" = ? WHERE "users"."id" = ?  [["disabled", nil], ["id", 12]]
+   (11.9ms)  commit transaction
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
+  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.0ms)  begin transaction
+   (0.0ms)  commit transaction
+  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.0ms)  begin transaction
+   (0.0ms)  commit transaction
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
-Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 2ms (ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
-Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
+Completed 200 OK in 26ms (Views: 0.2ms | ActiveRecord: 12.5ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:09 +0000
+Processing by ExampleController#restricted as JSON
+Completed   in 7ms (ActiveRecord: 0.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:09 +0000
+Processing by ExampleController#restricted as JSON
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-  User Update (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 12]]
-   (7.2ms)  commit transaction
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
-Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
-Authenticating with gds_sso strategy
-Completed   in 1ms (ActiveRecord: 0.1ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
-Started GET "/auth/gds/callback?code=TmrgzvTZZPAjsCbcL5jsAObXc8KImNbvz9KHQUb6Yd0&state=998904e72a6470aa7952433aa79a7787971e50f69a08325e" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
-Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"TmrgzvTZZPAjsCbcL5jsAObXc8KImNbvz9KHQUb6Yd0", "state"=>"998904e72a6470aa7952433aa79a7787971e50f69a08325e"}
-Authenticating with gds_sso strategy
-  User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
    (0.0ms)  commit transaction
+  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-  User Update (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 12]]
-   (4.8ms)  commit transaction
-Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 8ms (ActiveRecord: 5.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:28 +0000
-Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
+   (0.0ms)  commit transaction
+  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.0ms)  begin transaction
+   (0.0ms)  commit transaction
+  CACHE User Load (0.0ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+   (0.0ms)  begin transaction
+   (0.0ms)  commit transaction
+   (0.0ms)  begin transaction
+   (0.0ms)  commit transaction
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "dummyapiuser@domain.com"], ["LIMIT", 1]]
+Completed 200 OK in 5ms (Views: 0.2ms | ActiveRecord: 0.4ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:09 +0000
+Processing by ExampleController#restricted as JSON
+Completed   in 11ms (ActiveRecord: 0.0ms)
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "user@example.com"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Dummy API user created by gds-sso"], ["uid", "4960"], ["email", "dummyapiuser@domain.com"], ["permissions", "---\n- signin\n"]]
-   (6.5ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions", "organisation_slug", "organisation_content_id", "disabled") VALUES (?, ?, ?, ?, ?, ?, ?)  [["name", "A Name"], ["uid", "asd"], ["email", "user@example.com"], ["permissions", "---\n- signin\n"], ["organisation_slug", "hmrc"], ["organisation_content_id", "67a2b78d-eee3-45b3-80e2-792e7f71cecc"], ["disabled", nil]]
+   (4.2ms)  commit transaction
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-  User Update (0.2ms)  UPDATE "users" SET "permissions" = ? WHERE "users"."id" = ?  [["permissions", "---\n- signin\n- extra_permission\n"], ["id", 13]]
-   (6.7ms)  commit transaction
-   (1.0ms)  SELECT sqlite_version(*)
+   (0.0ms)  commit transaction
+   (1.1ms)  SELECT sqlite_version(*)
    (0.0ms)  SELECT sqlite_version(*)
    (0.1ms)  DROP TABLE IF EXISTS "users"
-   (28.8ms)  CREATE TABLE "users" ("id" integer PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 0)
-   (50.9ms)  CREATE TABLE "ar_internal_metadata" ("key" varchar NOT NULL PRIMARY KEY, "value" varchar, "created_at" datetime(6) NOT NULL, "updated_at" datetime(6) NOT NULL)
+   (21.5ms)  CREATE TABLE "users" ("id" integer PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 0)
+   (9.5ms)  CREATE TABLE "ar_internal_metadata" ("key" varchar NOT NULL PRIMARY KEY, "value" varchar, "created_at" datetime(6) NOT NULL, "updated_at" datetime(6) NOT NULL)
   ActiveRecord::InternalMetadata Load (0.1ms)  SELECT "ar_internal_metadata".* FROM "ar_internal_metadata" WHERE "ar_internal_metadata"."key" = ? LIMIT ?  [["key", "environment"], ["LIMIT", 1]]
   TRANSACTION (0.0ms)  begin transaction
-  ActiveRecord::InternalMetadata Create (0.1ms)  INSERT INTO "ar_internal_metadata" ("key", "value", "created_at", "updated_at") VALUES (?, ?, ?, ?)  [["key", "environment"], ["value", "test"], ["created_at", "2021-06-10 10:30:36.659757"], ["updated_at", "2021-06-10 10:30:36.659757"]]
-  TRANSACTION (9.6ms)  commit transaction
-   (8.4ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL PRIMARY KEY)
+  ActiveRecord::InternalMetadata Create (0.2ms)  INSERT INTO "ar_internal_metadata" ("key", "value", "created_at", "updated_at") VALUES (?, ?, ?, ?)  [["key", "environment"], ["value", "test"], ["created_at", "2021-06-24 15:07:17.817637"], ["updated_at", "2021-06-24 15:07:17.817637"]]
+  TRANSACTION (4.0ms)  commit transaction
+   (3.9ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL PRIMARY KEY)
   ActiveRecord::InternalMetadata Load (0.1ms)  SELECT "ar_internal_metadata".* FROM "ar_internal_metadata" WHERE "ar_internal_metadata"."key" = ? LIMIT ?  [["key", "environment"], ["LIMIT", 1]]
    (0.1ms)  SELECT sqlite_version(*)
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "dummyapiuser@domain.com"], ["LIMIT", 1]]
   TRANSACTION (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Dummy API user created by gds-sso"], ["uid", "7088"], ["email", "dummyapiuser@domain.com"], ["permissions", "---\n- signin\n"]]
-  TRANSACTION (9.3ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Dummy API user created by gds-sso"], ["uid", "8757"], ["email", "dummyapiuser@domain.com"], ["permissions", "---\n- signin\n"]]
+  TRANSACTION (5.8ms)  commit transaction
   TRANSACTION (0.0ms)  begin transaction
-  User Update (0.1ms)  UPDATE "users" SET "permissions" = ? WHERE "users"."id" = ?  [["permissions", "---\n- signin\n- extra_permission\n"], ["id", 1]]
-  TRANSACTION (9.2ms)  commit transaction
-  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
+  User Update (0.2ms)  UPDATE "users" SET "permissions" = ? WHERE "users"."id" = ?  [["permissions", "---\n- signin\n- extra_permission\n"], ["id", 1]]
+  TRANSACTION (4.6ms)  commit transaction
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "user@example.com"], ["LIMIT", 1]]
   TRANSACTION (0.0ms)  begin transaction
   User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions", "organisation_slug", "organisation_content_id", "disabled") VALUES (?, ?, ?, ?, ?, ?, ?)  [["name", "A Name"], ["uid", "asd"], ["email", "user@example.com"], ["permissions", "---\n- signin\n"], ["organisation_slug", "hmrc"], ["organisation_content_id", "67a2b78d-eee3-45b3-80e2-792e7f71cecc"], ["disabled", nil]]
-  TRANSACTION (9.1ms)  commit transaction
+  TRANSACTION (3.8ms)  commit transaction
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
-Processing by ExampleController#this_requires_signin_permission as HTML
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
+Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 11ms (ActiveRecord: 0.0ms | Allocations: 1328)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
-Started GET "/auth/gds/callback?code=8aR534GBTpwECc08vQQVQOraAYfQvEjh5hTlJvvzzVg&state=2a301db727905da0fa36957fa3526f610c4973148bd80795" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Started GET "/" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
+Processing by ExampleController#index as HTML
+  Rendering text template
+  Rendered text template (Duration: 0.0ms | Allocations: 3)
+Completed 200 OK in 2ms (Views: 2.2ms | ActiveRecord: 0.0ms | Allocations: 1295)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 140)
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
+Started GET "/auth/gds/callback?code=39AdRZzCXy86wvQ2csEN2uJvpEPwXEdV3tB6xITV6X8&state=7c4adf039ec5430052b3b96f70921e4524699771d44aa135" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"8aR534GBTpwECc08vQQVQOraAYfQvEjh5hTlJvvzzVg", "state"=>"2a301db727905da0fa36957fa3526f610c4973148bd80795"}
+  Parameters: {"code"=>"39AdRZzCXy86wvQ2csEN2uJvpEPwXEdV3tB6xITV6X8", "state"=>"7c4adf039ec5430052b3b96f70921e4524699771d44aa135"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
-  TRANSACTION (0.1ms)  begin transaction
+  TRANSACTION (0.0ms)  begin transaction
   User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Test User"], ["uid", "integration-uid"], ["email", "test@example-client.com"], ["permissions", "---\n- signin\n"]]
-  TRANSACTION (5.3ms)  commit transaction
+  TRANSACTION (4.5ms)  commit transaction
   TRANSACTION (0.0ms)  begin transaction
-  User Update (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", 0], ["id", 3]]
-  TRANSACTION (5.7ms)  commit transaction
-Redirected to http://www.example-client.com/this_requires_signin_permission
-Completed 302 Found in 16ms (ActiveRecord: 11.7ms | Allocations: 1508)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
-Processing by ExampleController#this_requires_signin_permission as HTML
-  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
+  User Update (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", 0], ["id", 3]]
+  TRANSACTION (5.2ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 13ms (ActiveRecord: 10.3ms | Allocations: 1505)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
-  Rendered text template (Duration: 0.0ms | Allocations: 3)
-Completed 200 OK in 3ms (Views: 2.2ms | ActiveRecord: 0.1ms | Allocations: 1878)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+  Rendered text template (Duration: 0.0ms | Allocations: 1)
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.2ms | Allocations: 742)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 138)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
-Started GET "/auth/gds/callback?code=njujNdvEW_QtIIJp6N0t-MP3FIFDXXsbxayC14eOyrY&state=52764e9d78dea362e3351d0c7b2d1f3d0b71412765664451" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
+Started GET "/auth/gds/callback?code=pNzHNSC1T5XozVikGQWhSATH5Pb1Kc8WpjEiIWxpANw&state=46e8ef44600a67a54dc7b346013613b0f1b3a57f50f9aec6" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"njujNdvEW_QtIIJp6N0t-MP3FIFDXXsbxayC14eOyrY", "state"=>"52764e9d78dea362e3351d0c7b2d1f3d0b71412765664451"}
+  Parameters: {"code"=>"pNzHNSC1T5XozVikGQWhSATH5Pb1Kc8WpjEiIWxpANw", "state"=>"46e8ef44600a67a54dc7b346013613b0f1b3a57f50f9aec6"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
 Redirected to http://www.example-client.com/this_requires_signin_permission
 Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 954)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 706)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
-Processing by ExampleController#restricted as HTML
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 708)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 138)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
-Started GET "/auth/gds/callback?code=R_lWFyGDxKwzvEKD9fBIkRij-9IEsqFaBVvIbG6xpiQ&state=cd3ed937eee9eeed0373b6ccc8c583b9ed6a029a55ae9277" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
+Started GET "/auth/gds/callback?code=_HKrxwsuFfoFI-EFGPOoR-YluJPGHk5JAFUB3VJVF-k&state=409daeb35905cbe0a219109a8bc52eb5ceffdea03d5ef8dd" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"R_lWFyGDxKwzvEKD9fBIkRij-9IEsqFaBVvIbG6xpiQ", "state"=>"cd3ed937eee9eeed0373b6ccc8c583b9ed6a029a55ae9277"}
+  Parameters: {"code"=>"_HKrxwsuFfoFI-EFGPOoR-YluJPGHk5JAFUB3VJVF-k", "state"=>"409daeb35905cbe0a219109a8bc52eb5ceffdea03d5ef8dd"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 3ms (ActiveRecord: 0.1ms | Allocations: 954)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
-Processing by ExampleController#restricted as HTML
+Redirected to http://www.example-client.com/this_requires_signin_permission
+Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 956)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.1ms | Allocations: 706)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 711)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 138)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
-Started GET "/auth/gds/callback?code=PborNNhaSRNUuYerUy8s7WwRY3cIwhIi0Zg23VsNbIU&state=d1673429b6d57b85fa608c5c09871e8d89c7a0554437c965" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
+Started GET "/auth/gds/callback?code=mHs-lXzKmDFHB1SXCSJuXn7W9OVNcOsYIx_k2v3fot4&state=1fceb89873dc52d3ee983aa065b8015d1ec5427ca4f1b534" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"PborNNhaSRNUuYerUy8s7WwRY3cIwhIi0Zg23VsNbIU", "state"=>"d1673429b6d57b85fa608c5c09871e8d89c7a0554437c965"}
+  Parameters: {"code"=>"mHs-lXzKmDFHB1SXCSJuXn7W9OVNcOsYIx_k2v3fot4", "state"=>"1fceb89873dc52d3ee983aa065b8015d1ec5427ca4f1b534"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 956)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 954)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 709)
-Started GET "/" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
-Processing by ExampleController#index as HTML
-  Rendering text template
-  Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 0ms (Views: 0.2ms | ActiveRecord: 0.0ms | Allocations: 152)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 712)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 138)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
-Started GET "/auth/gds/callback?code=FHrVL9iV6eGb8332lllh76sJXT7cNReWGA8qkqTZyZ0&state=8035d255a78ecf5a32692ffc4cb852f79a5fddeca4f8b7ef" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
+Started GET "/auth/gds/callback?code=qGB_SkFJJy4j6W9IgVMlC1mUE77LKceIgTi380YIVL4&state=8d35f367cd0356ae3ccef692df23e1ca21b955512c64ede6" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"FHrVL9iV6eGb8332lllh76sJXT7cNReWGA8qkqTZyZ0", "state"=>"8035d255a78ecf5a32692ffc4cb852f79a5fddeca4f8b7ef"}
+  Parameters: {"code"=>"qGB_SkFJJy4j6W9IgVMlC1mUE77LKceIgTi380YIVL4", "state"=>"8d35f367cd0356ae3ccef692df23e1ca21b955512c64ede6"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
 Redirected to http://www.example-client.com/restricted
 Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 954)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 706)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 712)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 138)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
-Started GET "/auth/gds/callback?code=GEupc4D0RXd_-ZQvHcBcs_AWacINgDIxzncJTFvaaKk&state=8217b0c23f865c15f35eb2fafcb3e2c0b5d27eca876c9aee" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
+Started GET "/auth/gds/callback?code=l46JFUPUTn9KVOA0npfn8WGyqd98OtcoJa45dGcsyco&state=e415c039785d1bb4e4d30ff012814293de4b1263c6179356" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"GEupc4D0RXd_-ZQvHcBcs_AWacINgDIxzncJTFvaaKk", "state"=>"8217b0c23f865c15f35eb2fafcb3e2c0b5d27eca876c9aee"}
+  Parameters: {"code"=>"l46JFUPUTn9KVOA0npfn8WGyqd98OtcoJa45dGcsyco", "state"=>"e415c039785d1bb4e4d30ff012814293de4b1263c6179356"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 954)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Completed 302 Found in 12ms (ActiveRecord: 0.1ms | Allocations: 954)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 706)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-11 06:35:37 +0000
-Processing by ExampleController#restricted as HTML
-Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 518)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-11 06:35:37 +0000
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 715)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-25 11:12:18 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 138)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
-Started GET "/auth/gds/callback?code=26YRM7zzQjcd0kbFCB34Qg5plBP-RGwxGG9Zt48uiys&state=33d6934dbb642702761f59ccd86b80468fc8122d93a77c3e" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 524)
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-25 11:12:18 +0000
+Started GET "/auth/gds/callback?code=SxZ-tTP80KGWJkoBBt1_xI42jpfkq_Tp0UU-ruzJPiU&state=a1c8b4d7a2a25e7563d7a2fbbd3f8688a6d271a15ff7898c" for 127.0.0.1 at 2021-06-25 11:12:18 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"26YRM7zzQjcd0kbFCB34Qg5plBP-RGwxGG9Zt48uiys", "state"=>"33d6934dbb642702761f59ccd86b80468fc8122d93a77c3e"}
+  Parameters: {"code"=>"SxZ-tTP80KGWJkoBBt1_xI42jpfkq_Tp0UU-ruzJPiU", "state"=>"a1c8b4d7a2a25e7563d7a2fbbd3f8688a6d271a15ff7898c"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 956)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 1166)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-25 11:12:18 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 709)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-11 06:35:37 +0000
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 947)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 518)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-11 06:35:37 +0000
-Started GET "/auth/gds/callback?code=OHoMOzgG_1ekae5Oc96Q4EITaWT5V28fOEfB9Qn5m6M&state=c889f0ffdca95a0e97849411c4930fbada920f7520b5884e" for 127.0.0.1 at 2021-06-11 06:35:37 +0000
+Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 138)
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
+Started GET "/auth/gds/callback?code=9tZhB8q-sHj4s08XFIn3q-ZACshjd_9GnxL-H52KS6E&state=15434d9a957c9d030fdc5917d2446f85e9f189bea4b0fd00" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"OHoMOzgG_1ekae5Oc96Q4EITaWT5V28fOEfB9Qn5m6M", "state"=>"c889f0ffdca95a0e97849411c4930fbada920f7520b5884e"}
+  Parameters: {"code"=>"9tZhB8q-sHj4s08XFIn3q-ZACshjd_9GnxL-H52KS6E", "state"=>"15434d9a957c9d030fdc5917d2446f85e9f189bea4b0fd00"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 1164)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-11 06:35:37 +0000
+Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 954)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 941)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 712)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-25 11:12:18 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 524)
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-25 11:12:18 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 138)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
-Started GET "/auth/gds/callback?code=DgwvLsSm6JNEkhI3QaYJvus-fqXa_xLHg-msjnm1_DU&state=61420a59a7dd7ea72f630d5c175e4cdf7d8417b681f761f0" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
+Started GET "/auth/gds/callback?code=YU6PMQzhZarCYt9tRe-8sXk3Q3Yv7oJIaRG9USCiX4c&state=9acc47d76439cc66fed03928f992f7dbafdf8898eba15334" for 127.0.0.1 at 2021-06-24 15:07:18 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"DgwvLsSm6JNEkhI3QaYJvus-fqXa_xLHg-msjnm1_DU", "state"=>"61420a59a7dd7ea72f630d5c175e4cdf7d8417b681f761f0"}
+  Parameters: {"code"=>"YU6PMQzhZarCYt9tRe-8sXk3Q3Yv7oJIaRG9USCiX4c", "state"=>"9acc47d76439cc66fed03928f992f7dbafdf8898eba15334"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
 Redirected to http://www.example-client.com/restricted
 Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 954)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:19 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 706)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-11 06:25:37 +0000
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 712)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-25 11:02:19 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 939)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 945)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:19 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 138)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
-Started GET "/auth/gds/callback?code=__kXQJGvRY9iQIu49JUFdYG90m-gJrkxwDyKSbXtgig&state=969fa8f7610fc1c1bbc12dbe8d5cc052bbcb8906a447844f" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:19 +0000
+Started GET "/auth/gds/callback?code=XlCeG0-vhjY847bzPqxjnmxw_cPVPIltwvDtysehTfQ&state=ef0633f755ced30ca91ff947401b0b0a7817719961569994" for 127.0.0.1 at 2021-06-24 15:07:19 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"__kXQJGvRY9iQIu49JUFdYG90m-gJrkxwDyKSbXtgig", "state"=>"969fa8f7610fc1c1bbc12dbe8d5cc052bbcb8906a447844f"}
+  Parameters: {"code"=>"XlCeG0-vhjY847bzPqxjnmxw_cPVPIltwvDtysehTfQ", "state"=>"ef0633f755ced30ca91ff947401b0b0a7817719961569994"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 954)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 956)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:19 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 706)
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 714)
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
   TRANSACTION (0.0ms)  begin transaction
-  User Update (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", 1], ["id", 3]]
-  TRANSACTION (8.9ms)  commit transaction
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
+  User Update (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", 1], ["id", 3]]
+  TRANSACTION (3.5ms)  commit transaction
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:19 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
 Authenticating with gds_sso strategy
-Completed   in 1ms (ActiveRecord: 0.1ms | Allocations: 576)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:37 +0000
-Started GET "/auth/gds/callback?code=uGWMkfVa7tpjif3i7Vb-SG_QOQEDOltYmvMJyy5S0do&state=59efd52753bc877dd6bab1fef36cd9ba67b1083422363baa" for 127.0.0.1 at 2021-06-10 10:30:38 +0000
+Completed   in 1ms (ActiveRecord: 0.1ms | Allocations: 582)
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:19 +0000
+Started GET "/auth/gds/callback?code=h8HMJubRbRZ_7IaVfXioZ2NnDsXe2Fonu7M6VVRtQZA&state=412aed4624fa25935ed5f4e4cf613bed99d86ff9558353fc" for 127.0.0.1 at 2021-06-24 15:07:19 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"uGWMkfVa7tpjif3i7Vb-SG_QOQEDOltYmvMJyy5S0do", "state"=>"59efd52753bc877dd6bab1fef36cd9ba67b1083422363baa"}
+  Parameters: {"code"=>"h8HMJubRbRZ_7IaVfXioZ2NnDsXe2Fonu7M6VVRtQZA", "state"=>"412aed4624fa25935ed5f4e4cf613bed99d86ff9558353fc"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
   TRANSACTION (0.0ms)  begin transaction
   User Update (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", 0], ["id", 3]]
-  TRANSACTION (8.2ms)  commit transaction
+  TRANSACTION (4.4ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 13ms (ActiveRecord: 8.5ms | Allocations: 1164)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:38 +0000
+Completed 302 Found in 7ms (ActiveRecord: 4.7ms | Allocations: 1162)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:19 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 706)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:38 +0000
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 710)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:19 +0000
+Processing by ExampleController#restricted as JSON
+Completed   in 12ms (ActiveRecord: 0.0ms | Allocations: 2196)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:19 +0000
 Processing by ExampleController#restricted as JSON
-Completed   in 9ms (ActiveRecord: 0.0ms | Allocations: 2304)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:38 +0000
-Processing by ExampleController#this_requires_signin_permission as JSON
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
   TRANSACTION (0.0ms)  begin transaction
-  User Update (0.1ms)  UPDATE "users" SET "disabled" = ? WHERE "users"."id" = ?  [["disabled", nil], ["id", 3]]
-  TRANSACTION (8.7ms)  commit transaction
+  User Update (0.2ms)  UPDATE "users" SET "disabled" = ? WHERE "users"."id" = ?  [["disabled", nil], ["id", 3]]
+  TRANSACTION (3.8ms)  commit transaction
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
   CACHE User Load (0.0ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
   CACHE User Load (0.0ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 14ms (Views: 0.2ms | ActiveRecord: 9.1ms | Allocations: 3566)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:38 +0000
-Processing by ExampleController#restricted as JSON
+Completed 200 OK in 10ms (Views: 0.2ms | ActiveRecord: 4.2ms | Allocations: 3566)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:19 +0000
+Processing by ExampleController#this_requires_signin_permission as JSON
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
   CACHE User Load (0.0ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
   CACHE User Load (0.0ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
@@ -683,114 +687,113 @@ Processing by ExampleController#restricted as JSON
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
 Completed 200 OK in 5ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 3267)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:38 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:19 +0000
 Processing by ExampleController#restricted as JSON
-Completed   in 14ms (ActiveRecord: 0.0ms | Allocations: 1804)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:38 +0000
-Processing by ExampleController#restricted as HTML
-Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 140)
-  TRANSACTION (0.1ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d38852"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-  TRANSACTION (6.0ms)  commit transaction
+Completed   in 7ms (ActiveRecord: 0.0ms | Allocations: 1912)
   TRANSACTION (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d39597"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-  TRANSACTION (8.1ms)  commit transaction
-Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d38852"}
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d31638"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+  TRANSACTION (3.6ms)  commit transaction
+  TRANSACTION (0.0ms)  begin transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d33347"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+  TRANSACTION (4.6ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"nonexistent-user"}
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "nonexistent-user"], ["LIMIT", 1]]
+Completed 200 OK in 1ms (ActiveRecord: 0.1ms | Allocations: 545)
+  TRANSACTION (0.0ms)  begin transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d35732"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+  TRANSACTION (3.8ms)  commit transaction
+  TRANSACTION (0.0ms)  begin transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d37370"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+  TRANSACTION (4.9ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"a1s2d35732"}
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d35732"], ["LIMIT", 1]]
+  TRANSACTION (0.0ms)  begin transaction
+  User Update (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", 1], ["id", 6]]
+  TRANSACTION (3.2ms)  commit transaction
+Completed 200 OK in 5ms (ActiveRecord: 3.5ms | Allocations: 888)
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 6], ["LIMIT", 1]]
+  TRANSACTION (0.0ms)  begin transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d36063"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+  TRANSACTION (5.0ms)  commit transaction
+  TRANSACTION (0.0ms)  begin transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d37559"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+  TRANSACTION (3.7ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"a1s2d36063"}
   Rendering layout /var/lib/jenkins/workspace/gds-sso_master/app/views/layouts/unauthorised.html.erb
   Rendering /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
   Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
   Rendered /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (Duration: 0.5ms | Allocations: 262)
   Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
-  Rendered layout /var/lib/jenkins/workspace/gds-sso_master/app/views/layouts/unauthorised.html.erb (Duration: 0.7ms | Allocations: 356)
-Completed 403 Forbidden in 3ms (Views: 2.8ms | ActiveRecord: 0.0ms | Allocations: 1638)
+  Rendered layout /var/lib/jenkins/workspace/gds-sso_master/app/views/layouts/unauthorised.html.erb (Duration: 0.6ms | Allocations: 356)
+Completed 403 Forbidden in 3ms (Views: 2.6ms | ActiveRecord: 0.0ms | Allocations: 1595)
   TRANSACTION (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d33216"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-  TRANSACTION (9.0ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d31534"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+  TRANSACTION (4.6ms)  commit transaction
   TRANSACTION (0.0ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d39884"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-  TRANSACTION (7.3ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d31632"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+  TRANSACTION (4.0ms)  commit transaction
 Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d33216"}
-  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d33216"], ["LIMIT", 1]]
+  Parameters: {"uid"=>"a1s2d31534"}
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d31534"], ["LIMIT", 1]]
   TRANSACTION (0.0ms)  begin transaction
-  User Update (0.1ms)  UPDATE "users" SET "name" = ?, "email" = ?, "permissions" = ?, "organisation_slug" = ?, "organisation_content_id" = ? WHERE "users"."id" = ?  [["name", "Joshua Marshall"], ["email", "user@domain.com"], ["permissions", "---\n- signin\n- new permission\n"], ["organisation_slug", "justice-league"], ["organisation_content_id", "aae1319e-5788-4677-998c-f1a53af528d0"], ["id", 6]]
-  TRANSACTION (6.3ms)  commit transaction
-Completed 200 OK in 9ms (ActiveRecord: 6.6ms | Allocations: 1232)
-  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 6], ["LIMIT", 1]]
-  TRANSACTION (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d37543"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-  TRANSACTION (8.4ms)  commit transaction
+  User Update (0.2ms)  UPDATE "users" SET "name" = ?, "email" = ?, "permissions" = ?, "organisation_slug" = ?, "organisation_content_id" = ? WHERE "users"."id" = ?  [["name", "Joshua Marshall"], ["email", "user@domain.com"], ["permissions", "---\n- signin\n- new permission\n"], ["organisation_slug", "justice-league"], ["organisation_content_id", "aae1319e-5788-4677-998c-f1a53af528d0"], ["id", 10]]
+  TRANSACTION (4.7ms)  commit transaction
+Completed 200 OK in 7ms (ActiveRecord: 5.0ms | Allocations: 1230)
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 10], ["LIMIT", 1]]
   TRANSACTION (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d32346"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-  TRANSACTION (21.4ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d37543"}
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d38627"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+  TRANSACTION (3.8ms)  commit transaction
+  TRANSACTION (0.3ms)  begin transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d366"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+  TRANSACTION (4.7ms)  commit transaction
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d38627"}
   Rendering layout /var/lib/jenkins/workspace/gds-sso_master/app/views/layouts/unauthorised.html.erb
   Rendering /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
   Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
   Rendered /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (Duration: 0.1ms | Allocations: 55)
   Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
   Rendered layout /var/lib/jenkins/workspace/gds-sso_master/app/views/layouts/unauthorised.html.erb (Duration: 0.2ms | Allocations: 146)
-Completed 403 Forbidden in 1ms (Views: 0.6ms | ActiveRecord: 0.0ms | Allocations: 527)
-  TRANSACTION (0.0ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d39492"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-  TRANSACTION (6.0ms)  commit transaction
-  TRANSACTION (0.0ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d32633"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-  TRANSACTION (6.0ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"nonexistent-user"}
-  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "nonexistent-user"], ["LIMIT", 1]]
-Completed 200 OK in 1ms (ActiveRecord: 0.1ms | Allocations: 500)
-  TRANSACTION (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d3674"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-  TRANSACTION (6.9ms)  commit transaction
-  TRANSACTION (0.0ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d38302"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-  TRANSACTION (5.9ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d3674"}
-  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d3674"], ["LIMIT", 1]]
-  TRANSACTION (0.1ms)  begin transaction
-  User Update (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", 1], ["id", 12]]
-  TRANSACTION (9.4ms)  commit transaction
-Completed 200 OK in 11ms (ActiveRecord: 9.7ms | Allocations: 889)
-  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 12], ["LIMIT", 1]]
+Completed 403 Forbidden in 1ms (Views: 0.5ms | ActiveRecord: 0.0ms | Allocations: 528)
    (0.1ms)  DROP TABLE IF EXISTS "users"
    (0.9ms)  SELECT sqlite_version(*)
-   (27.6ms)  CREATE TABLE "users" ("id" integer PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 'f')
-   (9.6ms)  CREATE TABLE "ar_internal_metadata" ("key" varchar NOT NULL PRIMARY KEY, "value" varchar, "created_at" datetime NOT NULL, "updated_at" datetime NOT NULL)
+   (9.2ms)  CREATE TABLE "users" ("id" integer PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 'f')
+   (4.5ms)  CREATE TABLE "ar_internal_metadata" ("key" varchar NOT NULL PRIMARY KEY, "value" varchar, "created_at" datetime NOT NULL, "updated_at" datetime NOT NULL)
   ActiveRecord::InternalMetadata Load (0.1ms)  SELECT  "ar_internal_metadata".* FROM "ar_internal_metadata" WHERE "ar_internal_metadata"."key" = ? LIMIT ?  [["key", "environment"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-  ActiveRecord::InternalMetadata Create (0.1ms)  INSERT INTO "ar_internal_metadata" ("key", "value", "created_at", "updated_at") VALUES (?, ?, ?, ?)  [["key", "environment"], ["value", "test"], ["created_at", "2021-06-10 10:30:42.481738"], ["updated_at", "2021-06-10 10:30:42.481738"]]
-   (9.2ms)  commit transaction
-   (9.0ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL PRIMARY KEY)
+  ActiveRecord::InternalMetadata Create (0.2ms)  INSERT INTO "ar_internal_metadata" ("key", "value", "created_at", "updated_at") VALUES (?, ?, ?, ?)  [["key", "environment"], ["value", "test"], ["created_at", "2021-06-24 15:07:23.703952"], ["updated_at", "2021-06-24 15:07:23.703952"]]
+   (4.5ms)  commit transaction
+   (3.8ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL PRIMARY KEY)
   ActiveRecord::InternalMetadata Load (0.1ms)  SELECT  "ar_internal_metadata".* FROM "ar_internal_metadata" WHERE "ar_internal_metadata"."key" = ? LIMIT ?  [["key", "environment"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "dummyapiuser@domain.com"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Dummy API user created by gds-sso"], ["uid", "9405"], ["email", "dummyapiuser@domain.com"], ["permissions", "---\n- signin\n"]]
-   (20.6ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Dummy API user created by gds-sso"], ["uid", "1713"], ["email", "dummyapiuser@domain.com"], ["permissions", "---\n- signin\n"]]
+   (4.9ms)  commit transaction
    (0.0ms)  begin transaction
   User Update (0.1ms)  UPDATE "users" SET "permissions" = ? WHERE "users"."id" = ?  [["permissions", "---\n- signin\n- extra_permission\n"], ["id", 1]]
-   (11.1ms)  commit transaction
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+   (3.8ms)  commit transaction
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 4ms (ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by ExampleController#restricted as JSON
 Completed   in 15ms (ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by ExampleController#restricted as JSON
+Completed   in 6ms (ActiveRecord: 0.0ms)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
+Processing by ExampleController#this_requires_signin_permission as JSON
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
   User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions", "disabled") VALUES (?, ?, ?, ?, ?)  [["name", "Test User"], ["uid", "integration-uid"], ["email", "test@example-client.com"], ["permissions", "---\n- signin\n"], ["disabled", nil]]
-   (13.3ms)  commit transaction
+   (4.4ms)  commit transaction
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
@@ -802,15 +805,12 @@ Processing by ExampleController#restricted as JSON
    (0.0ms)  commit transaction
    (0.0ms)  begin transaction
   User Update (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 2]]
-   (10.1ms)  commit transaction
+   (3.5ms)  commit transaction
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 32ms (Views: 1.8ms | ActiveRecord: 24.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Completed 200 OK in 17ms (Views: 1.9ms | ActiveRecord: 8.7ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by ExampleController#restricted as JSON
-Completed   in 9ms (ActiveRecord: 0.0ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
-Processing by ExampleController#this_requires_signin_permission as JSON
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
@@ -828,42 +828,37 @@ Processing by ExampleController#this_requires_signin_permission as JSON
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 5ms (Views: 0.2ms | ActiveRecord: 0.4ms)
-Started GET "/" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
-Processing by ExampleController#index as HTML
-  Rendering text template
-  Rendered text template (0.0ms)
-Completed 200 OK in 0ms (Views: 0.1ms | ActiveRecord: 0.0ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
-Started GET "/auth/gds/callback?code=QK_d2eOlo_pM4cbz_wZJw_H5UKIqelwZiSfIyTvr1uU&state=fb29a403224aeeca35f99fa768696083e9322cc33ebadeaa" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
+Started GET "/auth/gds/callback?code=hWxTwmxDoE_djU24rcIQcLtp4pHI346HfrcrPGV3sX0&state=90fb5ee9023a6d52162c420629fff5987b7e6c68040a042a" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"QK_d2eOlo_pM4cbz_wZJw_H5UKIqelwZiSfIyTvr1uU", "state"=>"fb29a403224aeeca35f99fa768696083e9322cc33ebadeaa"}
+  Parameters: {"code"=>"hWxTwmxDoE_djU24rcIQcLtp4pHI346HfrcrPGV3sX0", "state"=>"90fb5ee9023a6d52162c420629fff5987b7e6c68040a042a"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
   User Update (0.2ms)  UPDATE "users" SET "disabled" = ? WHERE "users"."id" = ?  [["disabled", "f"], ["id", 2]]
-   (13.7ms)  commit transaction
+   (3.8ms)  commit transaction
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 16ms (ActiveRecord: 14.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Completed 302 Found in 6ms (ActiveRecord: 4.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.2ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
-Started GET "/auth/gds/callback?code=DNF6vhrLSyxmhK7Pqh84b__wcEFAucetYCG1Z7BCEzU&state=6736e66f5a569591dfadb8f730c9d5e77588072e8a22d858" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
+Started GET "/auth/gds/callback?code=Y_W5wcdikisLMb3KJi-cZKxPViQvhiU9zxivtcQtJz0&state=7155300e1f22cb9a4bda1aad508df56dcc9d70ed6533f2b2" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"DNF6vhrLSyxmhK7Pqh84b__wcEFAucetYCG1Z7BCEzU", "state"=>"6736e66f5a569591dfadb8f730c9d5e77588072e8a22d858"}
+  Parameters: {"code"=>"Y_W5wcdikisLMb3KJi-cZKxPViQvhiU9zxivtcQtJz0", "state"=>"7155300e1f22cb9a4bda1aad508df56dcc9d70ed6533f2b2"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
@@ -872,42 +867,42 @@ Authenticating with gds_sso strategy
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
 Completed 302 Found in 2ms (ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
-Processing by ExampleController#this_requires_signin_permission as HTML
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
+Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
-Started GET "/auth/gds/callback?code=sUN3qAGjbsnPLRVYmvhXzGzY_0BuvJinA1NUsJla_a4&state=e7a5cb0c448ddabdd11e7018842cc3aaf3a38ea09d279f5c" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
+Started GET "/auth/gds/callback?code=vAKhnOOH8Dwyw4GnbhMxPrYkcJwQZA6DA3lV4-bOzoc&state=6438221c90801a88449946169b173bbf29332fa50c7d0d6d" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"sUN3qAGjbsnPLRVYmvhXzGzY_0BuvJinA1NUsJla_a4", "state"=>"e7a5cb0c448ddabdd11e7018842cc3aaf3a38ea09d279f5c"}
+  Parameters: {"code"=>"vAKhnOOH8Dwyw4GnbhMxPrYkcJwQZA6DA3lV4-bOzoc", "state"=>"6438221c90801a88449946169b173bbf29332fa50c7d0d6d"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.1ms)  begin transaction
    (0.0ms)  commit transaction
    (0.0ms)  begin transaction
-   (0.1ms)  commit transaction
-Redirected to http://www.example-client.com/this_requires_signin_permission
-Completed 302 Found in 2ms (ActiveRecord: 0.3ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
-Processing by ExampleController#this_requires_signin_permission as HTML
+   (0.0ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 2ms (ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
+Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
-Started GET "/auth/gds/callback?code=5kU3CGbve2-NyI3okYOhxKSZ8Ty12I4iIQEAEuyrhKk&state=ffd8d6b733e6e65e6fe20758eb7f41b4f2979f38459d1108" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
+Started GET "/auth/gds/callback?code=OCvHEdwFmufCIFsECICIsYvEiD-LMle3SqFyjmEyUUU&state=aca01b34e1d0e4a05b4275c3e7bdc47ad3dd000cba702f5e" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"5kU3CGbve2-NyI3okYOhxKSZ8Ty12I4iIQEAEuyrhKk", "state"=>"ffd8d6b733e6e65e6fe20758eb7f41b4f2979f38459d1108"}
+  Parameters: {"code"=>"OCvHEdwFmufCIFsECICIsYvEiD-LMle3SqFyjmEyUUU", "state"=>"aca01b34e1d0e4a05b4275c3e7bdc47ad3dd000cba702f5e"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
@@ -916,64 +911,75 @@ Authenticating with gds_sso strategy
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/this_requires_signin_permission
 Completed 302 Found in 2ms (ActiveRecord: 0.2ms)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by ExampleController#this_requires_signin_permission as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
-Processing by ExampleController#restricted as HTML
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
-Started GET "/auth/gds/callback?code=s4taQ0QYYulHdoABDFTTPoGD540UFcOIuzULMycjL_c&state=ce7ce9282452e95a51819276ce69fedbe08f026bc0ce5803" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
+Started GET "/auth/gds/callback?code=qyW_SKHyBKlyQrvPpeqtBA8H4Ci7-9odQJmlmVO8_Lw&state=17e8db4fcff60179dd8e66fc4e132aad1a2d020f4f62f9e4" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"s4taQ0QYYulHdoABDFTTPoGD540UFcOIuzULMycjL_c", "state"=>"ce7ce9282452e95a51819276ce69fedbe08f026bc0ce5803"}
+  Parameters: {"code"=>"qyW_SKHyBKlyQrvPpeqtBA8H4Ci7-9odQJmlmVO8_Lw", "state"=>"17e8db4fcff60179dd8e66fc4e132aad1a2d020f4f62f9e4"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
+   (0.0ms)  begin transaction
    (0.0ms)  commit transaction
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
-Redirected to http://www.example-client.com/restricted
+Redirected to http://www.example-client.com/this_requires_signin_permission
 Completed 302 Found in 2ms (ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
-Processing by ExampleController#restricted as HTML
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Completed 200 OK in 1ms (Views: 0.1ms | ActiveRecord: 0.1ms)
+Started GET "/" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
+Processing by ExampleController#index as HTML
+  Rendering text template
+  Rendered text template (0.0ms)
+Completed 200 OK in 0ms (Views: 0.1ms | ActiveRecord: 0.0ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
-Started GET "/auth/gds/callback?code=Doo_CwRG4YPycpbdoaB_chDCoDbb2r1f946OX5Gqndw&state=68ff82c7edebdd9d4fed3221168bc3ddac7c8d91f2b89929" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
+Started GET "/auth/gds/callback?code=9W-zNi15XsVJmlLsShwUwuFlKP0MbywfukAKq6bYcT8&state=842f72102fffa4441281ddcc43546a6bcab66462c7b83ede" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"Doo_CwRG4YPycpbdoaB_chDCoDbb2r1f946OX5Gqndw", "state"=>"68ff82c7edebdd9d4fed3221168bc3ddac7c8d91f2b89929"}
+  Parameters: {"code"=>"9W-zNi15XsVJmlLsShwUwuFlKP0MbywfukAKq6bYcT8", "state"=>"842f72102fffa4441281ddcc43546a6bcab66462c7b83ede"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
+   (0.0ms)  begin transaction
    (0.0ms)  commit transaction
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
 Completed 302 Found in 2ms (ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
+  Rendering text template
+  Rendered text template (0.0ms)
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-25 11:02:24 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-11 06:35:43 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-11 06:35:43 +0000
-Started GET "/auth/gds/callback?code=kxARoNzri-TDJlarm1ALNYW4uJFEoBsniUiDwZN6z-E&state=05bb7f251aaec94c33a25e6d1b851aa5769d568d98f79d99" for 127.0.0.1 at 2021-06-11 06:35:43 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
+Started GET "/auth/gds/callback?code=5qrbYbf05gTD0xNEA2c14YT17KZWWznYMSSYcjy8NHY&state=8d93c84eacd1c79d540c926cc2dffb2bc980449c9b0641b1" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"kxARoNzri-TDJlarm1ALNYW4uJFEoBsniUiDwZN6z-E", "state"=>"05bb7f251aaec94c33a25e6d1b851aa5769d568d98f79d99"}
+  Parameters: {"code"=>"5qrbYbf05gTD0xNEA2c14YT17KZWWznYMSSYcjy8NHY", "state"=>"8d93c84eacd1c79d540c926cc2dffb2bc980449c9b0641b1"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
@@ -982,20 +988,20 @@ Authenticating with gds_sso strategy
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
 Completed 302 Found in 2ms (ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-11 06:35:43 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-25 11:12:24 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
-Started GET "/auth/gds/callback?code=5MGEnx70vmT8_CMUizzk3AZ9AJGM9mEEx7VtK3pf4T8&state=70cbead71a278aa73e9ec38cb377623b57d8fd41ac17cc9f" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-25 11:12:24 +0000
+Started GET "/auth/gds/callback?code=gHY0BRQJ7nr4ZwkkMp6Y9wENUu_wvURlMVfkXai4cCc&state=6b77f7008a8ef067f37e20aa6a05d8139334146feacdb6b3" for 127.0.0.1 at 2021-06-25 11:12:24 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"5MGEnx70vmT8_CMUizzk3AZ9AJGM9mEEx7VtK3pf4T8", "state"=>"70cbead71a278aa73e9ec38cb377623b57d8fd41ac17cc9f"}
+  Parameters: {"code"=>"gHY0BRQJ7nr4ZwkkMp6Y9wENUu_wvURlMVfkXai4cCc", "state"=>"6b77f7008a8ef067f37e20aa6a05d8139334146feacdb6b3"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
@@ -1003,27 +1009,21 @@ Authenticating with gds_sso strategy
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 3ms (ActiveRecord: 0.3ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Completed 302 Found in 2ms (ActiveRecord: 0.2ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-25 11:12:24 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-11 06:25:43 +0000
-Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
-  Rendering text template
-  Rendered text template (0.0ms)
-Completed 200 OK in 1ms (Views: 0.1ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
-Started GET "/auth/gds/callback?code=epw4QdEergGgmxUoejRDP5VD4iQoe9pH6NivI2gpWeQ&state=3bb357fbc74b0a4e1b759b1d88194bcee5cb3786c75f1c06" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
+Started GET "/auth/gds/callback?code=1jtx162txkXxvNszRSoKVJ6wJCNo5f1RLY9yc7OBvic&state=026e1ebf304b918674c035245c7c88fd74914d443d86b370" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"epw4QdEergGgmxUoejRDP5VD4iQoe9pH6NivI2gpWeQ", "state"=>"3bb357fbc74b0a4e1b759b1d88194bcee5cb3786c75f1c06"}
+  Parameters: {"code"=>"1jtx162txkXxvNszRSoKVJ6wJCNo5f1RLY9yc7OBvic", "state"=>"026e1ebf304b918674c035245c7c88fd74914d443d86b370"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
@@ -1032,25 +1032,25 @@ Authenticating with gds_sso strategy
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
 Completed 302 Found in 2ms (ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-11 06:35:43 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-25 11:12:24 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-11 06:35:43 +0000
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-25 11:12:24 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
-Started GET "/auth/gds/callback?code=_2JU42Ywty2c9KR_7TA8dvwOPm6F6GiTKPh5fI65qCE&state=1c665e9802ad618373ba4f0b78002fac4075fb35097832f8" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
+Started GET "/auth/gds/callback?code=qaq9OG5s1KEvIEUn9ZSp8hpqDPb_Kol_0Acdpyp_Ojk&state=aa64d0840148cb00c7b492760684d589fbafd42380353883" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"_2JU42Ywty2c9KR_7TA8dvwOPm6F6GiTKPh5fI65qCE", "state"=>"1c665e9802ad618373ba4f0b78002fac4075fb35097832f8"}
+  Parameters: {"code"=>"qaq9OG5s1KEvIEUn9ZSp8hpqDPb_Kol_0Acdpyp_Ojk", "state"=>"aa64d0840148cb00c7b492760684d589fbafd42380353883"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
@@ -1059,379 +1059,454 @@ Authenticating with gds_sso strategy
    (0.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
 Completed 302 Found in 2ms (ActiveRecord: 0.2ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-  User Update (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 2]]
-   (14.8ms)  commit transaction
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+   (0.1ms)  begin transaction
+  User Update (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 2]]
+   (5.4ms)  commit transaction
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
 Authenticating with gds_sso strategy
 Completed   in 1ms (ActiveRecord: 0.1ms)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
-Started GET "/auth/gds/callback?code=0WoPdbd1Jba2Dfu2D9e2jWUVDJfuEf5ZtN_Mg6YfFg4&state=19df4417ee75a80d363d099c4321a9d6cda190738bebfd86" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:24 +0000
+Started GET "/auth/gds/callback?code=gxtRcuvGynL28MfTKFhQtg9x0GhEzWUpEl1h79ckzwM&state=2634aebddf5ceb5a9ebf1926932dce412a9f592c0420a838" for 127.0.0.1 at 2021-06-24 15:07:25 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"0WoPdbd1Jba2Dfu2D9e2jWUVDJfuEf5ZtN_Mg6YfFg4", "state"=>"19df4417ee75a80d363d099c4321a9d6cda190738bebfd86"}
+  Parameters: {"code"=>"gxtRcuvGynL28MfTKFhQtg9x0GhEzWUpEl1h79ckzwM", "state"=>"2634aebddf5ceb5a9ebf1926932dce412a9f592c0420a838"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
    (0.0ms)  begin transaction
   User Update (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "f"], ["id", 2]]
-   (7.2ms)  commit transaction
+   (3.5ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 10ms (ActiveRecord: 7.5ms)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:43 +0000
+Completed 302 Found in 6ms (ActiveRecord: 3.8ms)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:25 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", "f"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (0.0ms)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms)
    (0.0ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d39364"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (7.5ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d31715"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (3.8ms)  commit transaction
+   (0.0ms)  begin transaction
+  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d32759"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (3.2ms)  commit transaction
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d31715"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d31715"], ["LIMIT", 1]]
+   (0.0ms)  begin transaction
+  User Update (0.1ms)  UPDATE "users" SET "email" = ?, "name" = ?, "permissions" = ?, "organisation_slug" = ?, "organisation_content_id" = ? WHERE "users"."id" = ?  [["email", "user@domain.com"], ["name", "Joshua Marshall"], ["permissions", "---\n- signin\n- new permission\n"], ["organisation_slug", "justice-league"], ["organisation_content_id", "aae1319e-5788-4677-998c-f1a53af528d0"], ["id", 3]]
+   (3.5ms)  commit transaction
+Completed 200 OK in 5ms (ActiveRecord: 3.7ms)
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 3], ["LIMIT", 1]]
+   (0.0ms)  begin transaction
+  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d31207"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (4.6ms)  commit transaction
    (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d39409"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (4.3ms)  commit transaction
+  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d33452"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (4.1ms)  commit transaction
 Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d39364"}
+  Parameters: {"uid"=>"a1s2d31207"}
   Rendering /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
   Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
   Rendered /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.2ms)
   Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
-Completed 403 Forbidden in 4ms (Views: 3.1ms | ActiveRecord: 0.0ms)
+Completed 403 Forbidden in 3ms (Views: 2.9ms | ActiveRecord: 0.0ms)
    (0.0ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d38528"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (4.7ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d3971"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (3.5ms)  commit transaction
    (0.0ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d39891"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (5.7ms)  commit transaction
-Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d38528"}
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d38528"], ["LIMIT", 1]]
-   (0.1ms)  begin transaction
-  User Update (0.2ms)  UPDATE "users" SET "email" = ?, "name" = ?, "permissions" = ?, "organisation_slug" = ?, "organisation_content_id" = ? WHERE "users"."id" = ?  [["email", "user@domain.com"], ["name", "Joshua Marshall"], ["permissions", "---\n- signin\n- new permission\n"], ["organisation_slug", "justice-league"], ["organisation_content_id", "aae1319e-5788-4677-998c-f1a53af528d0"], ["id", 5]]
-   (5.6ms)  commit transaction
-Completed 200 OK in 8ms (ActiveRecord: 5.9ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 5], ["LIMIT", 1]]
+  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d37077"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (4.6ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"a1s2d3971"}
+  Rendering /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
+  Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
+  Rendered /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.1ms)
+  Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
+Completed 403 Forbidden in 1ms (Views: 0.5ms | ActiveRecord: 0.0ms)
    (0.0ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d31137"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (6.0ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d36487"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+   (3.7ms)  commit transaction
    (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d36378"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (4.5ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d35006"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (4.8ms)  commit transaction
 Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d31137"}
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d31137"], ["LIMIT", 1]]
+  Parameters: {"uid"=>"a1s2d36487"}
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d36487"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-  User Update (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 7]]
-   (4.5ms)  commit transaction
-Completed 200 OK in 6ms (ActiveRecord: 4.8ms)
-  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 7], ["LIMIT", 1]]
-   (0.0ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d39459"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (4.6ms)  commit transaction
+  User Update (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", "t"], ["id", 9]]
+   (4.2ms)  commit transaction
+Completed 200 OK in 6ms (ActiveRecord: 4.5ms)
+  User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 9], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d34705"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d34693"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
    (4.5ms)  commit transaction
+   (0.0ms)  begin transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d35551"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+   (3.8ms)  commit transaction
 Processing by Api::UserController#reauth as HTML
   Parameters: {"uid"=>"nonexistent-user"}
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "nonexistent-user"], ["LIMIT", 1]]
 Completed 200 OK in 1ms (ActiveRecord: 0.1ms)
-   (0.0ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d39237"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-   (8.1ms)  commit transaction
-   (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d31577"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-   (8.2ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d39237"}
-  Rendering /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
-  Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
-  Rendered /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (0.1ms)
-  Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
-Completed 403 Forbidden in 1ms (Views: 0.6ms | ActiveRecord: 0.0ms)
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "user@example.com"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions", "organisation_slug", "organisation_content_id", "disabled") VALUES (?, ?, ?, ?, ?, ?, ?)  [["name", "A Name"], ["uid", "asd"], ["email", "user@example.com"], ["permissions", "---\n- signin\n"], ["organisation_slug", "hmrc"], ["organisation_content_id", "67a2b78d-eee3-45b3-80e2-792e7f71cecc"], ["disabled", nil]]
-   (7.9ms)  commit transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions", "organisation_slug", "organisation_content_id", "disabled") VALUES (?, ?, ?, ?, ?, ?, ?)  [["name", "A Name"], ["uid", "asd"], ["email", "user@example.com"], ["permissions", "---\n- signin\n"], ["organisation_slug", "hmrc"], ["organisation_content_id", "67a2b78d-eee3-45b3-80e2-792e7f71cecc"], ["disabled", nil]]
+   (4.1ms)  commit transaction
   User Load (0.1ms)  SELECT  "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
    (0.0ms)  begin transaction
    (0.0ms)  commit transaction
-   (1.0ms)  SELECT sqlite_version(*)
+   (1.1ms)  SELECT sqlite_version(*)
    (0.0ms)  SELECT sqlite_version(*)
    (0.1ms)  DROP TABLE IF EXISTS "users"
-   (53.5ms)  CREATE TABLE "users" ("id" integer PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 0)
-   (5.9ms)  CREATE TABLE "ar_internal_metadata" ("key" varchar NOT NULL PRIMARY KEY, "value" varchar, "created_at" datetime(6) NOT NULL, "updated_at" datetime(6) NOT NULL)
+   (4.3ms)  CREATE TABLE "users" ("id" integer PRIMARY KEY AUTOINCREMENT NOT NULL, "name" varchar NOT NULL, "uid" varchar NOT NULL, "email" varchar NOT NULL, "remotely_signed_out" boolean, "permissions" text, "organisation_slug" varchar, "organisation_content_id" varchar, "disabled" boolean DEFAULT 0)
+   (4.1ms)  CREATE TABLE "ar_internal_metadata" ("key" varchar NOT NULL PRIMARY KEY, "value" varchar, "created_at" datetime(6) NOT NULL, "updated_at" datetime(6) NOT NULL)
   ActiveRecord::InternalMetadata Load (0.1ms)  SELECT "ar_internal_metadata".* FROM "ar_internal_metadata" WHERE "ar_internal_metadata"."key" = ? LIMIT ?  [["key", "environment"], ["LIMIT", 1]]
   TRANSACTION (0.0ms)  begin transaction
-  ActiveRecord::InternalMetadata Create (0.2ms)  INSERT INTO "ar_internal_metadata" ("key", "value", "created_at", "updated_at") VALUES (?, ?, ?, ?)  [["key", "environment"], ["value", "test"], ["created_at", "2021-06-10 10:30:49.080981"], ["updated_at", "2021-06-10 10:30:49.080981"]]
-  TRANSACTION (13.4ms)  commit transaction
-   (6.3ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL PRIMARY KEY)
+  ActiveRecord::InternalMetadata Create (0.2ms)  INSERT INTO "ar_internal_metadata" ("key", "value", "created_at", "updated_at") VALUES (?, ?, ?, ?)  [["key", "environment"], ["value", "test"], ["created_at", "2021-06-24 15:07:30.849958"], ["updated_at", "2021-06-24 15:07:30.849958"]]
+  TRANSACTION (5.0ms)  commit transaction
+   (5.9ms)  CREATE TABLE "schema_migrations" ("version" varchar NOT NULL PRIMARY KEY)
   ActiveRecord::InternalMetadata Load (0.1ms)  SELECT "ar_internal_metadata".* FROM "ar_internal_metadata" WHERE "ar_internal_metadata"."key" = ? LIMIT ?  [["key", "environment"], ["LIMIT", 1]]
    (0.1ms)  SELECT sqlite_version(*)
+  TRANSACTION (0.0ms)  begin transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d3530"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+  TRANSACTION (3.7ms)  commit transaction
+  TRANSACTION (0.0ms)  begin transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d35614"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+  TRANSACTION (3.4ms)  commit transaction
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d3530"}
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d3530"], ["LIMIT", 1]]
+  TRANSACTION (0.0ms)  begin transaction
+  User Update (0.2ms)  UPDATE "users" SET "name" = ?, "email" = ?, "permissions" = ?, "organisation_slug" = ?, "organisation_content_id" = ? WHERE "users"."id" = ?  [["name", "Joshua Marshall"], ["email", "user@domain.com"], ["permissions", "---\n- signin\n- new permission\n"], ["organisation_slug", "justice-league"], ["organisation_content_id", "aae1319e-5788-4677-998c-f1a53af528d0"], ["id", 1]]
+  TRANSACTION (6.0ms)  commit transaction
+Completed 200 OK in 10ms (ActiveRecord: 6.3ms | Allocations: 2297)
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 1], ["LIMIT", 1]]
+  TRANSACTION (0.0ms)  begin transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d33643"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+  TRANSACTION (5.3ms)  commit transaction
+  TRANSACTION (0.0ms)  begin transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d34586"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+  TRANSACTION (5.8ms)  commit transaction
+Processing by Api::UserController#update as HTML
+  Parameters: {"uid"=>"a1s2d33643"}
+  Rendering layout /var/lib/jenkins/workspace/gds-sso_master/app/views/layouts/unauthorised.html.erb
+  Rendering /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
+  Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
+  Rendered /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (Duration: 0.5ms | Allocations: 191)
+  Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
+  Rendered layout /var/lib/jenkins/workspace/gds-sso_master/app/views/layouts/unauthorised.html.erb (Duration: 0.6ms | Allocations: 271)
+Completed 403 Forbidden in 4ms (Views: 3.9ms | ActiveRecord: 0.0ms | Allocations: 2025)
+  TRANSACTION (0.0ms)  begin transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d31870"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+  TRANSACTION (4.6ms)  commit transaction
+  TRANSACTION (0.0ms)  begin transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d36535"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+  TRANSACTION (7.0ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"a1s2d31870"}
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d31870"], ["LIMIT", 1]]
+  TRANSACTION (0.0ms)  begin transaction
+  User Update (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", 1], ["id", 5]]
+  TRANSACTION (5.8ms)  commit transaction
+Completed 200 OK in 7ms (ActiveRecord: 6.1ms | Allocations: 858)
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 5], ["LIMIT", 1]]
+  TRANSACTION (0.0ms)  begin transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d32503"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+  TRANSACTION (5.6ms)  commit transaction
+  TRANSACTION (0.0ms)  begin transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d35140"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+  TRANSACTION (6.5ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"nonexistent-user"}
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "nonexistent-user"], ["LIMIT", 1]]
+Completed 200 OK in 1ms (ActiveRecord: 0.1ms | Allocations: 500)
+  TRANSACTION (0.0ms)  begin transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d33825"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
+  TRANSACTION (7.7ms)  commit transaction
+  TRANSACTION (0.0ms)  begin transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d37402"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
+  TRANSACTION (5.2ms)  commit transaction
+Processing by Api::UserController#reauth as HTML
+  Parameters: {"uid"=>"a1s2d33825"}
+  Rendering layout /var/lib/jenkins/workspace/gds-sso_master/app/views/layouts/unauthorised.html.erb
+  Rendering /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
+  Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
+  Rendered /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (Duration: 0.1ms | Allocations: 45)
+  Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
+  Rendered layout /var/lib/jenkins/workspace/gds-sso_master/app/views/layouts/unauthorised.html.erb (Duration: 0.2ms | Allocations: 119)
+Completed 403 Forbidden in 1ms (Views: 0.5ms | ActiveRecord: 0.0ms | Allocations: 515)
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "user@example.com"], ["LIMIT", 1]]
   TRANSACTION (0.0ms)  begin transaction
   User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions", "organisation_slug", "organisation_content_id", "disabled") VALUES (?, ?, ?, ?, ?, ?, ?)  [["name", "A Name"], ["uid", "asd"], ["email", "user@example.com"], ["permissions", "---\n- signin\n"], ["organisation_slug", "hmrc"], ["organisation_content_id", "67a2b78d-eee3-45b3-80e2-792e7f71cecc"], ["disabled", nil]]
-  TRANSACTION (7.2ms)  commit transaction
+  TRANSACTION (6.7ms)  commit transaction
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "asd"], ["LIMIT", 1]]
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "dummyapiuser@domain.com"], ["LIMIT", 1]]
+  TRANSACTION (0.0ms)  begin transaction
+  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Dummy API user created by gds-sso"], ["uid", "3876"], ["email", "dummyapiuser@domain.com"], ["permissions", "---\n- signin\n"]]
+  TRANSACTION (4.9ms)  commit transaction
+  TRANSACTION (0.0ms)  begin transaction
+  User Update (0.1ms)  UPDATE "users" SET "permissions" = ? WHERE "users"."id" = ?  [["permissions", "---\n- signin\n- extra_permission\n"], ["id", 12]]
+  TRANSACTION (3.9ms)  commit transaction
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
-Completed   in 7ms (ActiveRecord: 0.0ms | Allocations: 1044)
-Started GET "/" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
-Processing by ExampleController#index as HTML
-  Rendering text template
-  Rendered text template (Duration: 0.0ms | Allocations: 3)
-Completed 200 OK in 2ms (Views: 2.1ms | ActiveRecord: 0.0ms | Allocations: 1010)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
-Processing by ExampleController#this_requires_signin_permission as HTML
-Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 127)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
-Started GET "/auth/gds/callback?code=poY3NLTz67iH--VeVJOSPJs4tEJdf7lS8kHjO-WLzSk&state=9d453f5f56a0b1416ead5010b8c1867c1169bad85ff6429f" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
+Completed   in 5ms (ActiveRecord: 0.0ms | Allocations: 181)
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
+Started GET "/auth/gds/callback?code=H3ulL6DIpvs4a8qHSQ7b6USCNwj811b6ACDBHzBL41I&state=36c26d450a67135f3ea2f5b594ff71cb8dcdb10a1be14b9a" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"poY3NLTz67iH--VeVJOSPJs4tEJdf7lS8kHjO-WLzSk", "state"=>"9d453f5f56a0b1416ead5010b8c1867c1169bad85ff6429f"}
+  Parameters: {"code"=>"H3ulL6DIpvs4a8qHSQ7b6USCNwj811b6ACDBHzBL41I", "state"=>"36c26d450a67135f3ea2f5b594ff71cb8dcdb10a1be14b9a"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
   TRANSACTION (0.1ms)  begin transaction
   User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Test User"], ["uid", "integration-uid"], ["email", "test@example-client.com"], ["permissions", "---\n- signin\n"]]
-  TRANSACTION (4.7ms)  commit transaction
-  TRANSACTION (0.0ms)  begin transaction
-  User Update (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", 0], ["id", 2]]
-  TRANSACTION (4.3ms)  commit transaction
-Redirected to http://www.example-client.com/this_requires_signin_permission
-Completed 302 Found in 13ms (ActiveRecord: 9.5ms | Allocations: 1375)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
-Processing by ExampleController#this_requires_signin_permission as HTML
-  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
+  TRANSACTION (4.8ms)  commit transaction
+  TRANSACTION (0.1ms)  begin transaction
+  User Update (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", 0], ["id", 13]]
+  TRANSACTION (3.8ms)  commit transaction
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 13ms (ActiveRecord: 9.3ms | Allocations: 1345)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.2ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 671)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
-Processing by ExampleController#this_requires_signin_permission as HTML
+Completed 200 OK in 2ms (Views: 0.8ms | ActiveRecord: 0.2ms | Allocations: 885)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
+Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 125)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
-Started GET "/auth/gds/callback?code=Zdj9h1Ccr1q1cC9vWr-u_SZm2seKWX3yHYF5AuzHS_w&state=8bbabbddebb4195509444f8ae34f0d386ec6fc40cdaa4eab" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
+Started GET "/auth/gds/callback?code=_-munggz2tEqszBQeRRLlD4odBPpL0_pr5_4zLPd4P4&state=aed4a33d172c3f9d74acc4c774d0c7d82c552ca76ceb970a" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"Zdj9h1Ccr1q1cC9vWr-u_SZm2seKWX3yHYF5AuzHS_w", "state"=>"8bbabbddebb4195509444f8ae34f0d386ec6fc40cdaa4eab"}
+  Parameters: {"code"=>"_-munggz2tEqszBQeRRLlD4odBPpL0_pr5_4zLPd4P4", "state"=>"aed4a33d172c3f9d74acc4c774d0c7d82c552ca76ceb970a"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-Redirected to http://www.example-client.com/this_requires_signin_permission
-Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 851)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
-Processing by ExampleController#this_requires_signin_permission as HTML
+Redirected to http://www.example-client.com/restricted
+Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 852)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
+Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 644)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 650)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 125)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
-Started GET "/auth/gds/callback?code=_Z7DZyL_PQotnyAvO9L6yokfndLFW4N2UVq28MvqoPE&state=f3cfb828d6260e7a9c0ef84756421f8ff7bf9db03fc7b10e" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
+Started GET "/auth/gds/callback?code=oSUuWgUiI2PDM9GosDc3BFgTNvyBSJ0UhqrKxHG90F0&state=2d7c119c3cbd9aa502c7008b3d4ef45f0ff82dbf94fc6d06" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"_Z7DZyL_PQotnyAvO9L6yokfndLFW4N2UVq28MvqoPE", "state"=>"f3cfb828d6260e7a9c0ef84756421f8ff7bf9db03fc7b10e"}
+  Parameters: {"code"=>"oSUuWgUiI2PDM9GosDc3BFgTNvyBSJ0UhqrKxHG90F0", "state"=>"2d7c119c3cbd9aa502c7008b3d4ef45f0ff82dbf94fc6d06"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
 Redirected to http://www.example-client.com/restricted
 Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 851)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 644)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
-Processing by ExampleController#restricted as HTML
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 650)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 125)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
-Started GET "/auth/gds/callback?code=Kw1tXFSJYPgcyo0zaPOkkpLv8x7Mo_oCJ3wW-jyJdbs&state=a8c915ef91aab15a499f8c8f87ab6d6a3ce2763e376381da" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
+Started GET "/auth/gds/callback?code=c1jh92ZR-QwykvJSTBx6_xATju7tA6ZZXHxTA6_5iDU&state=31304cea18a2e793e923d31bf633af241927d585fd3120fc" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"Kw1tXFSJYPgcyo0zaPOkkpLv8x7Mo_oCJ3wW-jyJdbs", "state"=>"a8c915ef91aab15a499f8c8f87ab6d6a3ce2763e376381da"}
+  Parameters: {"code"=>"c1jh92ZR-QwykvJSTBx6_xATju7tA6ZZXHxTA6_5iDU", "state"=>"31304cea18a2e793e923d31bf633af241927d585fd3120fc"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-Redirected to http://www.example-client.com/restricted
+Redirected to http://www.example-client.com/this_requires_signin_permission
 Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 851)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
-Processing by ExampleController#restricted as HTML
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 644)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
-Processing by ExampleController#restricted as HTML
+Completed 200 OK in 2ms (Views: 0.3ms | ActiveRecord: 0.1ms | Allocations: 646)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 125)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
-Started GET "/auth/gds/callback?code=GERF15kDluQa2dp5XeTqf_7H4GgZWzyvS-tPoTFCYiw&state=95648fed8f1442abd58dece4ab1fb85681df97f135c47681" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
+Started GET "/auth/gds/callback?code=th8RxP-9fFwNb9A9hfGZhtJVqVhxFNK6-S99ZXjJ4M0&state=89536b063709885277307f72d7fba99eda015065b1316a4b" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"GERF15kDluQa2dp5XeTqf_7H4GgZWzyvS-tPoTFCYiw", "state"=>"95648fed8f1442abd58dece4ab1fb85681df97f135c47681"}
+  Parameters: {"code"=>"th8RxP-9fFwNb9A9hfGZhtJVqVhxFNK6-S99ZXjJ4M0", "state"=>"89536b063709885277307f72d7fba99eda015065b1316a4b"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 852)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
-Processing by ExampleController#restricted as HTML
+Redirected to http://www.example-client.com/this_requires_signin_permission
+Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 851)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
+Processing by ExampleController#this_requires_signin_permission as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
 Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 646)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:49 +0000
+Started GET "/" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
+Processing by ExampleController#index as HTML
+  Rendering text template
+  Rendered text template (Duration: 0.0ms | Allocations: 1)
+Completed 200 OK in 0ms (Views: 0.2ms | ActiveRecord: 0.0ms | Allocations: 135)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 125)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
-Started GET "/auth/gds/callback?code=SS7ZRwlXI033cU2y2tasB5ERe6f4enwfkLT2nBJSQ_k&state=978a61f7ffe7e72506de4a0bf2ec41f7c67701de4ebb1a8c" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:31 +0000
+Started GET "/auth/gds/callback?code=0SD9RgIWHFOHL81wpALmUHgqFntw99JxNIYKtoYfJ9w&state=71b5b1dc595f38ece7e73ad545442a1e5d868936cfc5b871" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"SS7ZRwlXI033cU2y2tasB5ERe6f4enwfkLT2nBJSQ_k", "state"=>"978a61f7ffe7e72506de4a0bf2ec41f7c67701de4ebb1a8c"}
+  Parameters: {"code"=>"0SD9RgIWHFOHL81wpALmUHgqFntw99JxNIYKtoYfJ9w", "state"=>"71b5b1dc595f38ece7e73ad545442a1e5d868936cfc5b871"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 851)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
+Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 852)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 645)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-11 06:25:50 +0000
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 653)
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
+  TRANSACTION (0.1ms)  begin transaction
+  User Update (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", 1], ["id", 13]]
+  TRANSACTION (6.2ms)  commit transaction
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
-  Rendering text template
-  Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 877)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
-Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 125)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
-Started GET "/auth/gds/callback?code=b-a6dkrt1fgeJE5Ejz0_jhGRMv-bXOok8ZfCGq1Zcz4&state=d83dd2370fc717c28d666a5646b07c2246b6f1eaff641be5" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
+Completed   in 1ms (ActiveRecord: 0.1ms | Allocations: 533)
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
+Started GET "/auth/gds/callback?code=vsOVC9zQHdiXBStBQZs9yMNFqkszo5vCm4oIv5M2y_g&state=1ee691d4263f97799b12fe9f9b6916ae6e7acc5f01adec35" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"b-a6dkrt1fgeJE5Ejz0_jhGRMv-bXOok8ZfCGq1Zcz4", "state"=>"d83dd2370fc717c28d666a5646b07c2246b6f1eaff641be5"}
+  Parameters: {"code"=>"vsOVC9zQHdiXBStBQZs9yMNFqkszo5vCm4oIv5M2y_g", "state"=>"1ee691d4263f97799b12fe9f9b6916ae6e7acc5f01adec35"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
+  TRANSACTION (0.0ms)  begin transaction
+  User Update (0.2ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", 0], ["id", 13]]
+  TRANSACTION (6.4ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 851)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
+Completed 302 Found in 9ms (ActiveRecord: 6.7ms | Allocations: 1042)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 644)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-11 06:35:50 +0000
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 648)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 496)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-11 06:35:50 +0000
-Started GET "/auth/gds/callback?code=vdoTkyc_Xkm-CGB4jUm4z4lmRaOaiiljYd4ZzRQL3bU&state=7fc532132e5776ef16749310626079a6bb451bfc4b81a289" for 127.0.0.1 at 2021-06-11 06:35:50 +0000
+Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 125)
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
+Started GET "/auth/gds/callback?code=tb1Jc8hBpHl8zC5tPevOz6mObQ6Ra16KzI2LaCq-0co&state=a837bda58de3d5cfb2f379076aeb15201c9e8e6a4afb9ab2" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"vdoTkyc_Xkm-CGB4jUm4z4lmRaOaiiljYd4ZzRQL3bU", "state"=>"7fc532132e5776ef16749310626079a6bb451bfc4b81a289"}
+  Parameters: {"code"=>"tb1Jc8hBpHl8zC5tPevOz6mObQ6Ra16KzI2LaCq-0co", "state"=>"a837bda58de3d5cfb2f379076aeb15201c9e8e6a4afb9ab2"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 1061)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-11 06:35:50 +0000
+Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 851)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 879)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 650)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-25 11:12:32 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 502)
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-25 11:12:32 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
 Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 125)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
-Started GET "/auth/gds/callback?code=EWxMYyyrCCr9d0lvtWvLgmnFQoi20_HTDsZ-R_UEteA&state=a0f70e3e74e22c22374faa25973314489a40bbc9b9e3b2c5" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
+Started GET "/auth/gds/callback?code=DiOM8PH5_KYgNnhd_CymxRS8SpL50mRfnHcKFVwqhGI&state=8984adcdd4743a1e6d53b65667090f491fddd3c60f624580" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"EWxMYyyrCCr9d0lvtWvLgmnFQoi20_HTDsZ-R_UEteA", "state"=>"a0f70e3e74e22c22374faa25973314489a40bbc9b9e3b2c5"}
+  Parameters: {"code"=>"DiOM8PH5_KYgNnhd_CymxRS8SpL50mRfnHcKFVwqhGI", "state"=>"8984adcdd4743a1e6d53b65667090f491fddd3c60f624580"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 5ms (ActiveRecord: 0.1ms | Allocations: 852)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
+Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 851)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 646)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-11 06:35:50 +0000
-Processing by ExampleController#restricted as HTML
-Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 496)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-11 06:35:50 +0000
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 650)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-25 11:12:32 +0000
 Processing by ExampleController#restricted as HTML
 Authenticating with gds_sso strategy
-Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 125)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
-Started GET "/auth/gds/callback?code=CQeMtdfpnAsZytncHbONqt5KLBtB8U8UrXKcGzjQz1c&state=ba8ed7ba8835953a6de1b33d768647894a66fac64ec91a94" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
+Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 502)
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-25 11:12:32 +0000
+Started GET "/auth/gds/callback?code=wf9Pa6-U1vVEF33RGodocnw11Ry7ZjJUqmyrirOfR-4&state=5f4d895e567b40f60e92a63294436fe41451ead621086b7d" for 127.0.0.1 at 2021-06-25 11:12:32 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"CQeMtdfpnAsZytncHbONqt5KLBtB8U8UrXKcGzjQz1c", "state"=>"ba8ed7ba8835953a6de1b33d768647894a66fac64ec91a94"}
+  Parameters: {"code"=>"wf9Pa6-U1vVEF33RGodocnw11Ry7ZjJUqmyrirOfR-4", "state"=>"5f4d895e567b40f60e92a63294436fe41451ead621086b7d"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 851)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
+Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 1061)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-25 11:12:32 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 644)
-  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "test@example-client.com"], ["LIMIT", 1]]
-  TRANSACTION (0.0ms)  begin transaction
-  User Update (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", 1], ["id", 2]]
-  TRANSACTION (5.3ms)  commit transaction
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 885)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
 Processing by ExampleController#restricted as HTML
-  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
 Authenticating with gds_sso strategy
-Completed   in 1ms (ActiveRecord: 0.1ms | Allocations: 527)
-Started GET "/auth/gds" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
-Started GET "/auth/gds/callback?code=JlyYyrWR1NDMYPUNDxrSRZlBXfqjY3bqPpgtiHzTuMw&state=28eb94d6b9576677d4983efd3181a2aa99ae4d89f4bdc974" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
+Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 125)
+Started GET "/auth/gds" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
+Started GET "/auth/gds/callback?code=aIBIEplBjLcfe3xY9PNl4uL46j1_1bMUBvg1Rb9Xs8o&state=0a814b33b5833491162d1a331034faf7784f14ca261ebe1a" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
 Processing by AuthenticationsController#callback as HTML
-  Parameters: {"code"=>"JlyYyrWR1NDMYPUNDxrSRZlBXfqjY3bqPpgtiHzTuMw", "state"=>"28eb94d6b9576677d4983efd3181a2aa99ae4d89f4bdc974"}
+  Parameters: {"code"=>"aIBIEplBjLcfe3xY9PNl4uL46j1_1bMUBvg1Rb9Xs8o", "state"=>"0a814b33b5833491162d1a331034faf7784f14ca261ebe1a"}
 Authenticating with gds_sso strategy
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
-  TRANSACTION (0.0ms)  begin transaction
-  User Update (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", 0], ["id", 2]]
-  TRANSACTION (6.0ms)  commit transaction
 Redirected to http://www.example-client.com/restricted
-Completed 302 Found in 8ms (ActiveRecord: 6.3ms | Allocations: 1042)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
+Completed 302 Found in 2ms (ActiveRecord: 0.1ms | Allocations: 853)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
+Processing by ExampleController#restricted as HTML
+  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
+  Rendering text template
+  Rendered text template (Duration: 0.0ms | Allocations: 1)
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 652)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-25 11:02:32 +0000
 Processing by ExampleController#restricted as HTML
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? AND "users"."remotely_signed_out" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["remotely_signed_out", 0], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 643)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
+Completed 200 OK in 1ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 883)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
+Processing by ExampleController#restricted as HTML
+Authenticating with gds_sso strategy
+Completed   in 0ms (ActiveRecord: 0.0ms | Allocations: 127)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
 Processing by ExampleController#restricted as JSON
-Completed   in 12ms (ActiveRecord: 0.0ms | Allocations: 2025)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
+Completed   in 15ms (ActiveRecord: 0.0ms | Allocations: 2027)
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
 Processing by ExampleController#restricted as JSON
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
   TRANSACTION (0.1ms)  begin transaction
-  User Update (0.1ms)  UPDATE "users" SET "disabled" = ? WHERE "users"."id" = ?  [["disabled", nil], ["id", 2]]
-  TRANSACTION (5.0ms)  commit transaction
+  User Update (0.2ms)  UPDATE "users" SET "disabled" = ? WHERE "users"."id" = ?  [["disabled", nil], ["id", 13]]
+  TRANSACTION (4.8ms)  commit transaction
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
   CACHE User Load (0.0ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
   CACHE User Load (0.0ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
-Completed 200 OK in 11ms (Views: 0.2ms | ActiveRecord: 5.4ms | Allocations: 3196)
-Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
+Completed 200 OK in 12ms (Views: 0.3ms | ActiveRecord: 5.3ms | Allocations: 3196)
+Started GET "/this_requires_signin_permission" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
 Processing by ExampleController#this_requires_signin_permission as JSON
   User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
   CACHE User Load (0.0ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "integration-uid"], ["LIMIT", 1]]
@@ -1440,81 +1515,6 @@ Processing by ExampleController#this_requires_signin_permission as JSON
   Rendering text template
   Rendered text template (Duration: 0.0ms | Allocations: 1)
 Completed 200 OK in 5ms (Views: 0.2ms | ActiveRecord: 0.1ms | Allocations: 2921)
-Started GET "/restricted" for 127.0.0.1 at 2021-06-10 10:30:50 +0000
+Started GET "/restricted" for 127.0.0.1 at 2021-06-24 15:07:32 +0000
 Processing by ExampleController#restricted as JSON
-Completed   in 7ms (ActiveRecord: 0.0ms | Allocations: 1815)
-  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."email" = ? ORDER BY "users"."id" ASC LIMIT ?  [["email", "dummyapiuser@domain.com"], ["LIMIT", 1]]
-  TRANSACTION (0.1ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Dummy API user created by gds-sso"], ["uid", "152"], ["email", "dummyapiuser@domain.com"], ["permissions", "---\n- signin\n"]]
-  TRANSACTION (5.3ms)  commit transaction
-  TRANSACTION (0.0ms)  begin transaction
-  User Update (0.1ms)  UPDATE "users" SET "permissions" = ? WHERE "users"."id" = ?  [["permissions", "---\n- signin\n- extra_permission\n"], ["id", 3]]
-  TRANSACTION (20.8ms)  commit transaction
-  TRANSACTION (0.0ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d36151"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-  TRANSACTION (6.3ms)  commit transaction
-  TRANSACTION (0.0ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d34951"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-  TRANSACTION (4.6ms)  commit transaction
-Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d36151"}
-  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d36151"], ["LIMIT", 1]]
-  TRANSACTION (0.0ms)  begin transaction
-  User Update (0.1ms)  UPDATE "users" SET "name" = ?, "email" = ?, "permissions" = ?, "organisation_slug" = ?, "organisation_content_id" = ? WHERE "users"."id" = ?  [["name", "Joshua Marshall"], ["email", "user@domain.com"], ["permissions", "---\n- signin\n- new permission\n"], ["organisation_slug", "justice-league"], ["organisation_content_id", "aae1319e-5788-4677-998c-f1a53af528d0"], ["id", 4]]
-  TRANSACTION (6.7ms)  commit transaction
-Completed 200 OK in 9ms (ActiveRecord: 7.0ms | Allocations: 1219)
-  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 4], ["LIMIT", 1]]
-  TRANSACTION (0.0ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d32720"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-  TRANSACTION (6.9ms)  commit transaction
-  TRANSACTION (0.0ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d36670"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-  TRANSACTION (6.0ms)  commit transaction
-Processing by Api::UserController#update as HTML
-  Parameters: {"uid"=>"a1s2d32720"}
-  Rendering layout /var/lib/jenkins/workspace/gds-sso_master/app/views/layouts/unauthorised.html.erb
-  Rendering /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
-  Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
-  Rendered /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (Duration: 0.5ms | Allocations: 191)
-  Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
-  Rendered layout /var/lib/jenkins/workspace/gds-sso_master/app/views/layouts/unauthorised.html.erb (Duration: 0.6ms | Allocations: 267)
-Completed 403 Forbidden in 3ms (Views: 2.5ms | ActiveRecord: 0.0ms | Allocations: 1359)
-  TRANSACTION (0.1ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d35740"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-  TRANSACTION (6.2ms)  commit transaction
-  TRANSACTION (0.1ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d32301"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-  TRANSACTION (6.8ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d35740"}
-  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "a1s2d35740"], ["LIMIT", 1]]
-  TRANSACTION (0.0ms)  begin transaction
-  User Update (0.1ms)  UPDATE "users" SET "remotely_signed_out" = ? WHERE "users"."id" = ?  [["remotely_signed_out", 1], ["id", 8]]
-  TRANSACTION (7.8ms)  commit transaction
-Completed 200 OK in 9ms (ActiveRecord: 8.0ms | Allocations: 849)
-  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."id" = ? LIMIT ?  [["id", 8], ["LIMIT", 1]]
-  TRANSACTION (0.0ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d37995"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-  TRANSACTION (5.4ms)  commit transaction
-  TRANSACTION (0.0ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d31590"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-  TRANSACTION (6.2ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"a1s2d37995"}
-  Rendering layout /var/lib/jenkins/workspace/gds-sso_master/app/views/layouts/unauthorised.html.erb
-  Rendering /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised
-  Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
-  Rendered /var/lib/jenkins/workspace/gds-sso_master/app/views/authorisations/unauthorised.html.erb within layouts/unauthorised (Duration: 0.1ms | Allocations: 45)
-  Template rendering was prevented by rspec-rails. Use `render_views` to verify rendered view contents if necessary.
-  Rendered layout /var/lib/jenkins/workspace/gds-sso_master/app/views/layouts/unauthorised.html.erb (Duration: 0.2ms | Allocations: 119)
-Completed 403 Forbidden in 1ms (Views: 0.5ms | ActiveRecord: 0.0ms | Allocations: 515)
-  TRANSACTION (0.0ms)  begin transaction
-  User Create (0.2ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "Moshua Jarshall"], ["uid", "a1s2d353"], ["email", "old@domain.com"], ["permissions", "---\n- signin\n"]]
-  TRANSACTION (6.1ms)  commit transaction
-  TRANSACTION (0.1ms)  begin transaction
-  User Create (0.1ms)  INSERT INTO "users" ("name", "uid", "email", "permissions") VALUES (?, ?, ?, ?)  [["name", "SSO Push user"], ["uid", "a1s2d38660"], ["email", "ssopushuser@legit.com"], ["permissions", "---\n- signin\n- user_update_permission\n"]]
-  TRANSACTION (6.3ms)  commit transaction
-Processing by Api::UserController#reauth as HTML
-  Parameters: {"uid"=>"nonexistent-user"}
-  User Load (0.1ms)  SELECT "users".* FROM "users" WHERE "users"."uid" = ? ORDER BY "users"."id" ASC LIMIT ?  [["uid", "nonexistent-user"], ["LIMIT", 1]]
-Completed 200 OK in 3ms (ActiveRecord: 0.1ms | Allocations: 501)
+Completed   in 9ms (ActiveRecord: 0.0ms | Allocations: 1815)