s3:auth check the user is valid first