Fix production login issues

- Add exception handling for current_user when user_id doesn't exist in DB
- Skip authentication on SessionsController, ReferralsController, and HomeController
- Add debug logging to track authentication flow
- Ensure public routes are properly excluded from auth requirements

Author: zachlatta

app/controllers/application_controller.rb

@@ -7,6 +7,10 @@ class ApplicationController < ActionController::Base
   # Session management helpers
   def current_user
     @current_user ||= User.find(session[:user_id]) if session[:user_id]
+  rescue ActiveRecord::RecordNotFound
+    # Handle case where user_id in session doesn't exist in database
+    session[:user_id] = nil
+    nil
   end
 
   def logged_in?
@@ -35,10 +39,14 @@ def require_admin
 
   def require_login_for_authenticated_routes
     # Skip authentication for certain routes
-    return if public_routes.include?(request.path) || 
-              request.path.start_with?('/auth/') ||
-              request.path.match?(/^\/[a-z0-9]+$/) # referral codes
+    if public_routes.include?(request.path) || 
+       request.path.start_with?('/auth/') ||
+       request.path.match?(/^\/[a-z0-9]+$/) # referral codes
+      Rails.logger.info "Skipping auth for #{request.path}"
+      return
+    end
 
+    Rails.logger.info "Requiring auth for #{request.path}, logged_in?: #{logged_in?}"
     require_login
   end
 

app/controllers/home_controller.rb

@@ -1,5 +1,6 @@
 class HomeController < ApplicationController
   include ActionView::Helpers::DateHelper
+  skip_before_action :require_login_for_authenticated_routes
   def index
     @recent_visits = Visit.includes(:user)
                           .recent

app/controllers/referrals_controller.rb

@@ -1,5 +1,6 @@
 class ReferralsController < ApplicationController
   include ApplicationHelper
+  skip_before_action :require_login_for_authenticated_routes
   def show
     @referral_code = params[:referral_code]
     @referrer = User.find_by(referral_code: @referral_code)

app/controllers/sessions_controller.rb

@@ -1,4 +1,5 @@
 class SessionsController < ApplicationController
+  skip_before_action :require_login_for_authenticated_routes
   def github
     # This action is no longer needed - we'll use a form that POSTs directly to /auth/github
     redirect_to '/auth/github', allow_other_host: true