removed checkUser() client side