forgot to remove user identity when check fails