Guard double authenticate calls

Whilst authenticating we emit signals and expect callbacks to prompts. The pam worker is inside pam_authenticate in the nested event loop.

It is not expected for GUI clients to call authenticate twice without a cancel inbetween, but we should still guard against it as it causes a mess.