Allow automatic reject only from preauth state
Fix transition from pending ext to rejected instead of cancel