client side bypass