checks the user ID, denies if user ID is wrong