check user auth for profile