adding auth bypass