part way through authorization