the trigger for the authenticate use server behavior should be the submit button pressed, or a form post. the authenticate user behavior preforms the login and set the login success or failure, so using the login success as the trigger is circular logic.