Hi @Shopflyer ,
It would seem you have done what’s needed for the most part. But just to be sure, after the merchant clicks install you do not restart the auth process, you have to continue it, this is exactly the part where your app receives the session token. That means the merchant is already authenticated by that point, you can route them to any route you want.