throw 403 on social setup if user is authenticated