ugly temporary workarounds
remove authentication requirement for packages, forever