primitive auth workaround