We should check auth tokens BEFORE input.