It can happen that the user is authenticated then the token is expired. The authenticated state should be updated to false in this case.