prevent getting LPA when authenticated user is not the LPA applicant