avoid adding the Authenticated role when it already exists