Adding check for req.user