Add user access constraint to data, fix lingering data integrity issues

Add access constraint that forces the user accessing form data to be the same user that created it. In the future there will be access scopes from oauth used for access, but that is outside the scope of phase 1.