stop user entering someone's trip via url