fixing the old TokenAuthenticatable strategy