SuppressLoginRedirectsForApiCalls: don't redirect if user is authenticated