At the moment, even if you enable authentication, users are still able to log in with other authentication options defined in the authentication settings page (which include: allow all, email and password, Google, Microsoft). Usually when enabling...