Added user-query check when setting up alerts.

Added a strict check whether the given user can set up the given query
as a periodic alert. This prevents malicious users from playing with
URL arguments.