this does not provide authentication, should not be used