checkin before auth