the /meals route was asking for a user, but f that