remove calls to authenticate! - already handled in before block