if client fails reauth, allow it to retry EAP