added user authentication, fixed routes to use authentication, fixed index and transactions to only display for current user