Added session checking to LoggedIn

Still requires checking that user actually exists.