Process auth requests with fraud rules