Added user.login middleware to some routes