Why does my authentication rule sometimes NOT get called?

Hmmm a few cents to add to this. Not sure if one is related to the other but rules are run only at successful login