user is authenticated. This is needed to avoid storing `None` as enterprise customer info in request session.