right now extra data is passed unnecessarily, this seems both insecure and inefficient
right now extra data is passed unnecessarily, this seems both insecure and inefficient