[#4] authenticate() needs username as a parameter