add check in auth