ignoring user provided authenticator?

[mutax]

Hey,

I was trying to implement my own authenticator to allow the password to be replaced by a user-specific API-Key. I noticed, that there seems to be no call to the supplied callback function, instead the authenticate function of the User Model is always called, and in addition this is not replacable as the model name is hardcoded.

I did some major rewrite in the decorator function and could try to format this as a patch - if its not a user error but an actual bug.