add re-try logic for anonymous purpose if decrypt fails

fixes an edge case where temp data is issued when user is anon, but then
on next request they are authenticated -- typical from a login page
scenario