checking for correct user