add check for valid user