My only problem with this message is that it's asking the dev/user who sees it about whether there is an authenticated user (which may not even be the problem, they may just not have set the configuration hash up).  But whether or not the configuration is set doesn't have to do with whether they have an authenticated user.