It's a simplified copy of login. If it's needed in login, I guess authenticate does not do it. At least that redirect to original_uri is not done by authenticate.