I don't understand this `||=`. When will @current_user be defined already? And if it is, do we have to do the whole `authenticate_or_request_with_http_token`? Shouldn't it them be

    unless @current_user
      authenticate_or_request_with_http_token
        ...
      end
    end
?