authenticate endpoint now in README