rename authenticate method to valid_token