work around a bug with cf auth