CVE-2015-5370: s4:rpc_server: let a failing auth3 mark the authentication as invalid