[ADD] auth bypass