Modified /api/user to get the id from the request