dont fail if no filter parameters
use 2fa directly instead of auto-preauth strategy