1. added authentication requirement for settings view
2. waited for currentUser to resolve before checking if logged in on route changes
3. express deprecated issue
4. added missing res param for handleError