Added check that the current logged in user matches the superuser. Removed the custom header check.