Fix User.authenticate