rename authenticate_user to authenticate_user!