change to use `authenticate_with?` method