Should `authenticateFirst` come before `validateUri`?