Added a 'hook' to indicate if checking is to be done in 'pre' auth or by default 'post' auth