redirect to root when not logged in
update userService, don't overwrite user, update kudos