remove unused helpers
add missing indexes to users
restrict routes