set authenticated=true (moved to Provider), rel #22
use postAuthenticationChecks, fix #65
v0.15.4