modify the postMatches route to 403 when the request has an invalid target_id