added override for res.render() that checks if a user is logged in and adds the user to the template its rendering for global access
removed password hash from the user object being returned to the template