pass original document during auth validation instead of destination uuid.