re-add authenticator params. somehow i removed it, but i don't know how this could slipped out...