bring back authenticate* to preserve debugging hook