Moved Authenticate to User from UserToken