diff --git a/changelog.html b/changelog.html
index fa46e2059b..ae23694c35 100644
--- a/changelog.html
+++ b/changelog.html
@@ -63,6 +63,9 @@ Upcoming changes</a>
 <div id="rc" style="display:none;"><!--=BEGIN=-->
 <h3><a name=v1.462>What's new in 1.462</a> <!--=DATE=--></h3>
 <ul class=image>
+  <li class=bug>
+    API token authentication was broken in 1.461
+    (<a href="https://issues.jenkins-ci.org/browse/JENKINS-13600">issue 13600</a>)
   <li class=rfe>
     Added the filter textbox to the update center selector.
     (<a href="https://issues.jenkins-ci.org/browse/JENKINS-13476">issue 13476</a>)
diff --git a/core/src/main/java/hudson/security/ACL.java b/core/src/main/java/hudson/security/ACL.java
index 1d4e47992e..05b7c33ac4 100644
--- a/core/src/main/java/hudson/security/ACL.java
+++ b/core/src/main/java/hudson/security/ACL.java
@@ -130,7 +130,7 @@ public abstract class ACL {
      */
     public static SecurityContext impersonate(Authentication auth) {
         SecurityContext old = SecurityContextHolder.getContext();
-        SecurityContextHolder.setContext(new NotSerilizableSecurityContext(ACL.SYSTEM));
+        SecurityContextHolder.setContext(new NotSerilizableSecurityContext(auth));
         return old;
     }
 }