> should attempt to autosigin an user who is not signed in and has not signed out

not signed in or out? Doesn't make sense.