changed http method for authenticate