pre-auth functionality