check authorization before serving audio files