ensure correct user is signed in