Ah, that's leftovers from before I removed .submit if the user wasn't authenticated. Doh!