if (! $self->authenticate($session)) { ...