/authenticate changed to /login