Forced authentication does not reset the AuthnInstant