work authorization gap