check connexion and auth for all actions