Edited User.authenticate logic - removed User.admin