Now accepts users who are not logged in..
If a user has no UID cookie, it will
ask them to log in,
but will allow them to continue,
calling them "unknown" if they don't,

If a user does have a uid cookie,
even if they are not logged in, it will respect the cookie.
(*but* will also return checklogin status as part of email,
 so if someone gets funny, we can look at it.)