need to check if a user is authenticated

not just there but also auth