Lesson 4/05 Bageleshop doesn't check if this is the actual user.

[runar-rkmedia]

There should be tests with multiple users. Currently, one could lazily circumvent the code here.