Added authorization to the /users route. This 'might' not be how this should be done. Keep an eye on this