first hack for sso