Always call authentication callback if not authenticated.