check that this user is authenticated should be added here i think