Patch for previous API token auth fix

Removed a return so both branches in authenticate fall through and return a
future.