Users are now "fully authenticated", test for failed authentication added.