Moved the owner allowed to access app validation to the pre auth validator