login fixed; authenticate method changed