Inject user from session into each view
Fixed relative url (had to be absolute)
Refactored references to user's model _id: use id instead