event_type:authentication reason:bypass_user