When you do an "auth" on a credit card you are doing an authorization and not an authentication.

What I offer here is wrong. The distinction between authentication and authorization is discribed at the bottom of this blog posting.