I believe that sign_out :user is probably not necessary.  We used to do lot's of assigning current_visitor to User.anonymous, because current_user would be nil otherwise, and we would get NPE all over the place.  I assume current_visitor is smarter.