fix the closing session bug, even if next user authentication is failed.