Subject: | user not authenticated when having a stale cookie |
The check_credentials method is run only when the user does not have a cookie and it is the only subroutine that checks the login and password. This means a user with a stale cookie cannot login.