In this order, wouldn't this let it bypass authentication?