when from weibo, don't check pwd on server side