if incident or request # is not one of the users, page will display no sensitive information