clever security measure you have there, bypass with a simple flag