force auth user for api