I haven't tried auth yet, but from what I see, you shouldn't null check the session again, since hasToken have already done it. For the persistSession, I think it should be used to write new login data, not reauthenticate logged in data. So I think persistSession isn't needed in the persistLogin