remove compression because it breaks sse n shit
only allow editable users to be opened
fix authorization helper for api routes