how-hackers-bypass-authentication