Provided additional clarification about the logic of the authenticate() functions following commit 6b6bdc83 and b4270a9a.
