actually, user and app are linked. User are player of an app. I'd prefer to only have to do 1 check given the player id