check for banned status on auth