Prevent public loading of finishAuthentication.

Fixes #1126