hacked auth procedure temporarily