set authentication state to false if session is null
set authentication state to false if session is null

if session object serialization fails, we end up in a situation where the authentication object says true but the session is null

pajp/weblatte,pajp/weblatte,pajp/weblatte,pajp/weblatte