checking users.{id} at setupMiddleware()