cui moved to beginning of post-auth section before logging calls