You're not checking if the authenticateProcess has been successful here, so the module will go ahead even if authentication failed.