set the user as logged in only if there were persisted credentials