question on postauth_query