Protected request for sensitive operations.
Removed parseUser() part that switched databases: this should only be done when needed.