preauth: don't use removed authRequest.map