WICKET-5308 make #authenticate protected to reduce confusion