Added an ownership requirement for getOne, update, and destroy routes