get_or_create was in authenticate was called with (sometimes) wrong parameters