return result of db.authenticate instead of true