Don't change state inside Authentication