To clarify: GSM is essentially first cellular protocol that does meaningful user authentication, on the other hand there is no way for user to explicitly authenticate the network. In usual operating mode the session is implicitly bidirectionally authenticated by the fact that both UE and network has to be able to derive same Kc, but nothing prevents the network from just ignoring the authentication response from UE and continuing in plaintext mode.