authentication workaround