remove auth check