Presumably this check is for the user being logged in, so I think we should get an XXX here saying this needs to be replaced by a proper token auth mechanism.