I moved the check here so I'd have access to the request (needed to validate privileges, but in this case, there is no privilege restriction, so I later removed it).