fix incorrect order of checking user info (with REST authkey)