Moved registration state check.

From preauth to authenticate to cover more authentication
implementations (oxAuth)