Merge pull request #324 from gabrielengel/patch-1

This avoids newly created users to be assumed as logged_in

Author: binarylogic

lib/authlogic/acts_as_authentic/logged_in_status.rb

@@ -31,7 +31,7 @@ def self.included(klass)
 
           klass.class_eval do
             include InstanceMethods
-            scope :logged_in, lambda{ where("last_request_at > ?", logged_in_timeout.seconds.ago) }
+            scope :logged_in, lambda{ where("last_request_at > ? and last_login_at IS NOT NULL", logged_in_timeout.seconds.ago) }
             scope :logged_out, lambda{ where("last_request_at is NULL or last_request_at <= ?", logged_in_timeout.seconds.ago) }
           end
         end