bug fixed: return type from 'authenticate' method was changed from string to an object instance.