Making sure SessionHelper#current_user does not find users with null tokens.
Now guest user is being signed in properly

No more false positives when a user is passed in with a nil token set,
and no token set on the cookie.