Pass-through pre-authentication