fixed post,put,delete function authentication get user param from url