Set access modifiers for providers

Only the `authenticate` method should be public accessible.