Check whether the user is authenticated (to the oauth2 server), instead of checking whether he is logged in.