this mean if we ever add more options to authenticate! method, the first param should be the policy_name even if its not used, like authenticate! :allowed, {logs: false} just to give an example, should authentication and authorization be so coupled?