How "is logged in" is not documented.

[markstos]

The documentation should clarify how it's determined if the user is already logged in or not.

The answer is that the user is considered logged in if either req.isAuthenticated or req.isAuthenticated() returns true.