Starting to think we need a helper class for validating login.  Similar login checking code is started to be scattered among various controllers and if we ever want to go change the behavior then we'll need to track down all those locations which is error prone.