add user check so that ajax does not choke