If the user has a valid cookie, don't make him log in.