myapp/lib/base.py:BaseController.__call__()
The redirected request arrives at the app’s BaseController and the session is examined for the presence of a value bound to AUTH_USER_ID.
This time, AUTH_USER_ID is bound, the corresponding User entity is retrieved and bound to the c.user context variable and the request is dispatched, as before, to DemoController.privindex().