core/apiRouter: call Authenticate method on AuthenticatorFunc, for single entry point