Odd authentication behavior