"receiving a request to access a resource, the request including a user" . . . . .