more condition checks, fake auth 0.999