FIX: try anonymous login when session token is invalid

src/main/java/caosdb/server/CaosAuthenticator.java

@@ -60,16 +60,15 @@ public class CaosAuthenticator extends Authenticator {
       if (sessionToken != null) {
         subject.login(sessionToken);
       }
-
-      // anonymous users
-      if (!subject.isAuthenticated()
-          && CaosDBServer.getServerProperty(ServerProperties.KEY_AUTH_OPTIONAL)
-              .equalsIgnoreCase("TRUE")) {
-        subject.login(AuthenticationUtils.ANONYMOUS_USER);
-      }
     } catch (AuthenticationException e) {
       logger.log(Level.INFO, "LOGIN_FAILED", e);
     }
+    // anonymous users
+    if (!subject.isAuthenticated()
+        && CaosDBServer.getServerProperty(ServerProperties.KEY_AUTH_OPTIONAL)
+        .equalsIgnoreCase("TRUE")) {
+      subject.login(AuthenticationUtils.ANONYMOUS_USER);
+    }
     return subject.isAuthenticated();
   }