+ api.supUser (sign up) function separated from express req/res