def authenticate_request
      session[:requested_url] = request.fullpath

      url = logged_in? ? shibbolite.access_denied_url : shibbolite.login_url

      # redirect to the selected url
      respond_to do |format|
        format.html { redirect_to url }
        format.js   { render js: "window.location.assign('#{url}');"}
      end
    end
def authenticate_request
      session[:requested_url] = request.fullpath

      url = logged_in? ? shibbolite.access_denied_url : shibbolite.login_url

      # redirect to the selected url
      respond_to do |format|
        format.html { redirect_to url }
        format.js   { render js: "window.location.assign('#{url}');"}
      end
    end
redirects the user to (re)authenticate with
 the Idp or a 403 forbidden page