I'm not sure considering `.user_authenticated?` can be true without a login when auth'd with a token. We'd have to make a request to get the current user then compare that to the login we pass.