fixed bug in Authentication::authenticate where not setting identity