remove authenticate(User) and friends, because it's not clear how they should behave when the user doesn't have an apiKey member set.  Fixes BC#62972434