Isn't it better (performance-wise) to check first whether a session already exists before doing the full log in?