Ah yes, since this method sets the session[:user] we shouldn't reprocess this method on subsequent requests.