auth form and check