extend checkAuth with overloading api method to allow suppressing direct
redirect after checkAuth