added error handling to tictail getUser
only allow requests from tictail users