+ api.sinUser (sign in) function separated from express req/res