authentication: /auth/authenticate method