Authenticate user before doing anything