Validating shopify authentication based user, not just on shop id