During authentication you should "cancel" eip, not turn it "off"

(from redmine: created on 2013-10-04, closed on 2013-10-07, duplicates #4035 (closed))