Implement _authenticate as ServerHook