Fixed to check whether the subject is authenticated, not whether it has a principal.