Bug 12954: Failed login should retain anonymous session