The server may still reject authentication at this point, so better use conditional success decision. This allows the potentially following EAP-Failure message to be processed properly. [Bug 354]