make 2nd auth request always just return ok