It's fully programmable. You can probably make it verify the user token and URL against a database.
They seem (at first glance) to have no concept of security in the sense of restricting people's access to certain content like in the case of all social networks.