Check for proper user on add/rem user routes.