verify user is in express request before allowing topic interactions!