check user auth on form submit!