fix require_same_user method