Require a valid user for all actions except GETs and only allow the user
who created a poem to modify it.  Hard-coded list of users for now.