add explicit kwargs to authenticate

Added explicit kwargs to `authenticate` so that if e.g. username and password are given to Django's main authenticate, Django detects that they will not work for this backend and skips it.