Returning unless authenticated on authenticate_user to avoid double rendering