Recalling that authenticate returns false for an invalid authentication, our strategy for user signin can be summarized as follows: