add control to request data related only to the logged in user