fixing bug #5135
authentication values are no more removed from session