code: @JSONField(serialize = false)
    public boolean isAuthenticated() {
      // TODO: need to support thirdparty login.
      String sessionToken = getSessionToken();
      return !StringUtil.isEmpty(sessionToken);
    }
docs: whether user is authenticated or not.
  @return