Fix `preauth()` which now accepts the pre-authorisation code as a parameter (as per docs).