would it be correct to rename "loginUser" to "revalidateSession" and "isSSO" to "isLoggedInViaSSO".  Also does this boolean parameter actually matter?