some auth checks