'Returns a `User` if the request session currently has a logged in user.
Otherwise returns `None`.'

def authenticate(self, request):

    request = request._request
    user = getattr(request, 'user', None)
    if ((not user) or user.is_anonymous()):
        return None
    self.enforce_csrf(request)
    return (user, None)
