Why double auth call on server pages? - Theo's Typesafe Cult