A growing number of states let doctors with strong approval records skip prior authorization entirely. Here's how 'gold carding' works, and its limits.