better auth checks