#27 custom middleware to verify user is owner of LD