validate auth