for developing, skip the troublesome session authentication