Yeah, in addition to here.  I don't think authenticate is used for logins via the login form.