modified user auth checks.