remove RequestBase.matches() method (#5)

do not verify match in ResourceReply.grant(), rely on caller instead