Add check to see if the request is valid.
Add can() method to check permissions.