remove self.authenticate method, current_user still broken