send() allowed without authentication