added function to verify user has access to an intention to counter user hacking a url