just ignore staff passphrases instead of redirecting to admin