remove the auth check