[CALLBACK] - authentication callback missing check