Guard double authenticate calls

Whilst authenticating we emit signals and expect callbacks to prompts.
The pam worker is inside pam_authenticate in the nested event loop.

It is not expected for GUI clients to call authenticate twice without a
cancel inbetween, but we should still guard against it as it causes a
mess.