bypass password/username added first step