That will get called anytime an `onlogin` is trigger. That means explicitly logging in manually when signed out or when loading a page and you were already signed in elsewhere.

Basically, you should be just fine to do it this way. The plus side is you have one less check to the login server because you will get the current logged in users user object in the `verifyResponse` callback you use.