This isn't authentication and authorization because we don't actually
use this for any authorization logic. We only use this for user
statistics in the admin area.