remove ensure authenticate