- server side bypass enabled