I had that originally, but found a case where it's pretty much always needed if a realm is declared (if no realm is declared, not request is actually made).

If you've logged into https://webmaker.org, and they later setup their realm, when you visit webmaker.org again, it should notice the realm, check its validity, and then set the logged_in flag on the realm as well. Even though there was already a logged_in flag on the site. Yea?