Added restrict function to routes. Updated user service.