How to Validate:
Send a Statement and Invoice from a test Account, click the link to view the Invoice or Statement PDF, within the URL edit the invoice_ID or statement_id portion by changing a digit and verify that you are not gaining access to a different Invoice or Statement