Remove authentication some authentication token stuffs

Since we don't have authentication token, we don't have to check if
password is "X".

:authentication_token don't have to be in the blacklist for
serialization too.
Merge pull request #2784 from yokomizor/remove_authentication_token_stuffs

Remove authentication some authentication token stuffs