emergency fix: remove authentication for the user/ routes