added second step in bypassing the username/password