There's already a method called `remember_token` here that grabs the token from the cookies. Introduction a `NullUser` object feels like a bigger re-factor. I'm going to leave it as is for now, and I'll keep it in mind that maybe introducing a `NullUser` object might be a good future re-factor.