bug fix in check for current user being owner

It would always return false as self.user apparently wasn't a string.
This should probably be enhanced even more to use a comparison between
urls.  Right now /account/test1 won't match /account/test1#owner but I
think they should match.