If there is no User.current set (because of failed authentication) why continue forward attempting to authorize?