Both the confirm.php and confirm_cart.php pages had "restrict access to page" server behaviors forcing it to the login page. I removed those and it now goes to paypal for payment.
You also had restrict access applied on the pp_confirm.php page, which would have prevented the payment from going through.