hacky authentication