how to enforce app check