New tactic: test for login in verify callback.