make check_user require login