Kwf_Setup::hasAuthedUser() checks user model

Only checking whether there is something stored in Kwf_Auth is too insecure