check authed before verify user id