changed oa to req.oa in routes/user.js to fix error