auth interceptor, ensureUser middleware, stackoverflow end-point