hack it so it works, but is possibly insecure