Update README.md

Changed req.data to req.user