This is done if not authenticated (on first request), so I have removed it in aid of isolated testing. Eager constructors are the devil!