check auth when loaded