why not using authentication key if he's lazy !?