Ion Auth - Lightweight Auth System based on Redux Auth 2

[eluser]megabyte[/eluser]
So I have a security question.

The is logged in function:

Code:

/**
* logged_in
*
* @return bool
* @author Mathew
**/
public function logged_in()
{
$identity = $this->ci->config->item('identity', 'ion_auth');

return (bool) $this->ci->session->userdata($identity);
}

Do you think it would be better to check their credential as far as being active, and not just checking a session?