Guard against the request object not having a user attribute in my Who's online middleware. This can happen if a redirect is issued before the authentication middleware gets to run.

{% extends 'base.html' %}
{% block title %}{{ flatpage.title }}{% endblock %}
{% block content %}
<h2>{{ flatpage.title }}</h2>
{{ flatpage.content }}
{% endblock %}