Right, so why are we checking it here? especially if the request scope doesn't have a loggedIn parameter? This is just unneeded logic if you cannot access the checkout page without signing in.