loginfilter - user.isValid()