Update routes/user.js

crypt this