<form action="POST" method="" name="logonform" id="logonform">
it should be:
<form action="" method="POST" name="logonform" id="logonform">
Then you need to update your trigger in your authenticate user server behavior. It should be the button press trigger, not before page load.