diff --git a/seria.php b/seria.php
index 8e33b50..df49960 100644
--- a/seria.php
+++ b/seria.php
@@ -52,48 +52,41 @@ if(!$sInAnnounce) {
     // replace this with id.flashii.net shit
     $mszAuth = (string)filter_input(INPUT_COOKIE, 'msz_auth');
     if(!empty($mszAuth)) {
-        $mszAuthDecoded = str_pad(base64_decode(str_pad(strtr($mszAuth, '-_', '+/'), strlen($mszAuth) % 4, '=', STR_PAD_RIGHT)), 37, "\0");
-        $mszAuthUnpacked = unpack('Cversion/Nuser/H*token', $mszAuthDecoded);
+        $loginMethod = 'Misuzu';
+        $loginSignature = sprintf('verify#%s#%s#%s', $loginMethod, $mszAuth, $_SERVER['REMOTE_ADDR']);
+        $loginSignature = hash_hmac('sha256', $loginSignature, SERIA_MSZ_SECRET);
 
-        if(isset($mszAuthUnpacked['version'])
-            && $mszAuthUnpacked['version'] >= 1
-            && isset($mszAuthUnpacked['user'])
-            && $mszAuthUnpacked['user'] > 0) {
-            $loginRequest = [
-                'user_id' => $mszAuthUnpacked['user'],
-                'token' => 'SESS:' . $mszAuth,
-                'ip' => $_SERVER['REMOTE_ADDR'],
-            ];
-            $loginSignature = hash_hmac('sha256', implode('#', $loginRequest), SERIA_MSZ_SECRET);
+        $login = curl_init(SERIA_CAUTH_ENDPOINT);
+        curl_setopt_array($login, [
+            CURLOPT_AUTOREFERER => false,
+            CURLOPT_FAILONERROR => false,
+            CURLOPT_FOLLOWLOCATION => true,
+            CURLOPT_HEADER => false,
+            CURLOPT_POST => true,
+            CURLOPT_POSTFIELDS => http_build_query([
+                'method' => $loginMethod,
+                'token' => $mszAuth,
+                'ipaddr' => $_SERVER['REMOTE_ADDR'],
+            ], '', '&', PHP_QUERY_RFC3986),
+            CURLOPT_RETURNTRANSFER => true,
+            CURLOPT_TCP_FASTOPEN => true,
+            CURLOPT_CONNECTTIMEOUT => 2,
+            CURLOPT_MAXREDIRS => 2,
+            CURLOPT_PROTOCOLS => CURLPROTO_HTTPS,
+            CURLOPT_TIMEOUT => 5,
+            CURLOPT_USERAGENT => 'Seria/' . SERIA_VERSION,
+            CURLOPT_HTTPHEADER => [
+                'Content-Type: application/x-www-form-urlencoded',
+                'X-SharpChat-Signature: ' . $loginSignature,
+            ],
+        ]);
+        $loginResponse = json_decode(curl_exec($login));
+        curl_close($login);
 
-            $login = curl_init(SERIA_CAUTH_ENDPOINT);
-            curl_setopt_array($login, [
-                CURLOPT_AUTOREFERER => false,
-                CURLOPT_FAILONERROR => false,
-                CURLOPT_FOLLOWLOCATION => true,
-                CURLOPT_HEADER => false,
-                CURLOPT_POST => true,
-                CURLOPT_POSTFIELDS => json_encode($loginRequest),
-                CURLOPT_RETURNTRANSFER => true,
-                CURLOPT_TCP_FASTOPEN => true,
-                CURLOPT_CONNECTTIMEOUT => 2,
-                CURLOPT_MAXREDIRS => 2,
-                CURLOPT_PROTOCOLS => CURLPROTO_HTTPS,
-                CURLOPT_TIMEOUT => 5,
-                CURLOPT_USERAGENT => 'Seria/' . SERIA_VERSION,
-                CURLOPT_HTTPHEADER => [
-                    'Content-Type: application/json',
-                    'X-SharpChat-Signature: ' . $loginSignature,
-                ],
-            ]);
-            $loginResponse = json_decode(curl_exec($login));
-            curl_close($login);
+        if(!empty($loginResponse->success))
+            $sUserInfo = SeriaUser::fromMisuzu($pdo, $loginResponse);
 
-            if(!empty($loginResponse->success))
-                $sUserInfo = SeriaUser::fromMisuzu($pdo, $loginResponse);
-
-            unset($mszAuth, $mszAuthDecoded, $mszAuthUnpacked, $loginRequest, $loginSignature, $login, $loginResponse);
-        }
+        unset($mszAuth, $loginMethod, $loginSignature, $loginMethod, $login, $loginResponse);
     }
 
     if(empty($_COOKIE['seria_random'])) {