file auth check