autologin in oauthclient decorator should direct itself to login not subsequent autologin
login in strategies can return false, and thus authenticator's login should also return false