factor out EAP into Identity and Authenticate states