authenticate api works again