verify user matches