Hi Nick,
Make sure you add anonymous user role in project security. In project security, allow anonymous user must be set to true and select anonymous user role. In Project settings, edit role-based homepages and add a new anonymous user role & select you app custom login page as target (make sure you provide anonymous role access to login page).
Hope this makes sense.