Also check `authenticated_userid` in `Authentication.is_authenticated`