Why do you exclude preview from authorize?