Time for action – bypassing Open Authentication