Fix "data" option name in session.authenticate