code can now handle all possible combinations of method, category, user. lots of changes! still need to consider when an id is not a report and not error 404