user auth as before action

just user auth