Extract login state to some domain object, and consider storing the state in shared prefs or something Depends on #4