check auth for stream where needed