Auth OK for BOPIS and S2s