Detect logged-in user correctly

self.request.user will always evaluate to True.  To check if a user is
authenticated, I need to use self.request.user.is_authenticated().

Closes #690