Add a secureSameUser method to throw when passed a different user

[elpete]

Just as sameUser returns false when the passed in user is different than the logged in user, secureSameUser will throw when the passed in user is different than the logged in user.