one user can only use once