Isaac Connor 2466d765bf If there is a username in the session, then we are logged in, but we need to load the user object from the db. We can't just trust it from the session. The user may have been deleted and having that data in the session can be a security risk. So load the user object on every request.

2019-02-05 11:44:45 -05:00

9.1 KiB

Raw Blame History

View Raw