diff --git a/lib/api_auth.js b/lib/api_auth.js
index <HASH>..<HASH> 100644
--- a/lib/api_auth.js
+++ b/lib/api_auth.js
@@ -145,7 +145,6 @@ api.verifySignature = function(req, sig, account, callback)
     var query = (sig.query).split("&").sort().filter(function(x) { return x != "" && x.indexOf(api.signatureHeaderName) != 0 }).join("&");
     switch (sig.version) {
     case -1:
-        if (sig.secret == secret) return callback(sig);
         if (!this.bcrypt) this.bcrypt = require('bcrypt');
         this.bcrypt.compare(sig.secret, secret, function(err, rc) {
             if (!rc) logger.debug("verifySignature:", 'failed', sig, account);
revert cleartext pw check