pre auth on post