checking req.isAuthenticated into authenticated routes