Removed insecure, and only allowed users to check for hashtag