moved user check from authCtrl to GlobalCtrl