check if requested subscription belongs to current user, otherwise throw exception (404)