Removed forgery protection from authenticate