Use User.is_authenticated as attribute