make sure MAC check passed