Small changes to order of pre-service call operations, mostly moving the pre-auth SECA rules to the top so they are run before authc and authz