unless we are recording don't check user & pw