use onRequest instead of onPreAuth to attach plugin handlers