So per our discussion, I think it makes sense to handle this error in the Authenticate() function. It simplifies the code flow here a bit, and makes all the error handling in one place.