changed authentication route to /authenticate