Fix logged state shown bug

When a user is not logged in, auth is {user: null}, so should use auth.user to indicate a user is logged in or not.