Always check whether client is pending authorisation