check the user auth