fixed get '/authenticate'