Can we do authentication before authorization in v3.0 ?