middleware for req.user & user files retrieving