Rely more on is_authenticated() to find out if the user is authenticated