Removed user data return object from authenticate()