pt-83593956: validation moved to auth-http