add simple check to ensure requests are legit