[Serusers] authenticating forwarded calls