If the user has already authenticated, we shouldn't prompt them for credentials or consent again.
If the user has already authenticated, we shouldn't prompt them for credentials or consent again.