I don’t think `authenticated?` would work here. What if the session timed out between requests? Only if `authenticated?` were also aware when the session times out this would work.