old authenticate code still exists