diff --git a/C4/Auth.pm b/C4/Auth.pm
index c00c610526..9143038ec5 100644
--- a/C4/Auth.pm
+++ b/C4/Auth.pm
@@ -948,6 +948,7 @@ sub checkauth {
                 C4::Context::_unset_userenv($sessionID);
                 $sessionID = undef;
                 undef $userid; # IMPORTANT: this assures us a new session in code below
+                $auth_state = 'failed';
             } elsif (!$logout) {
 
                 $cookie = $cookie_mgr->replace_in_list( $cookie, $query->cookie(