Protected AuthenticationManager.
Removed all direct calls to it.