added a /get endpoint that takes a header with a token as a means for identifying whose data to query from mongo