checks for usertype in session before checking access