so it's ok to do `current_user.identity.try(:should_reset_password?)`?  this works even if current user is anonymous?