added authenticate route and tests