current_user
Current_user is never falsy - it's an `AnonymousUserMixin` when someone's not logged in.