moved $.authenticated to $.req.authenticated.