Should default values of False be set for is_user_authenticated and is_user_staff (or are they "falsey" by default)?