Change CachedAuthenticatedSessionMechanism to return NOT_ATTEMPTED rather than NOT_AUTHENTICATED if the identity manager returns null