added missing Auth::check()