Moved authentication logic to 'security.authentication' service provider