check for current user before authenticating for admin