auth evaluation checklist