[#64] changed authenticate! so it doesn't use if