prevent user from requesting their own prekeys

since we know who a user is based on basic_auth we should be able to prevent them from needlessly burning prekeys. the only reason that I see this as useful would be to allow people to message their other devices, but I am not sure if this is a solid use case.

at the same time, this 'feature' does not break anything, so fixing this may not be necessary.
