signup legitimacy checks