Authenticate User is an OR statement
I've just worked out after hours of debugging, that the Authenticate extension performs only an OR statement on all the comparisons.
I debugged the hell out of it, and if the first comparison is True then the RulesPass is set to True and no more checking is done.
THIS SHOULD BE MADE CLEAR IN THE DOCUMENTATION and the dialog box.
Or have I misunderstood? :)