Might you be switching VLAN, so you assign a different VLAN before and after the captive portal authentication? In that case, your client is placed in a different VLAN and needs to get a new IP address, however it does not know it has to.. so it will try to use the old (pre-authentication) IP, and only on a DHCP timeout it will get a new IP in the new VLAN.
What also may help others in answering your question is what equipment are you using? WLAN? Captive portal? Authentication server? Versions? What authentication methods have you configured?
Without that info, it may be difficult to provide guidance. May be it is good, if it is Aruba equipment, to open a Aruba TAC case through your partner, so someone from TAC can look with you how to configure this properly.