GET /supplies returns for user's apartment only