cleanup and switched checkUser to req.url