Forgot to remove the id from authenticate route