token verification for all user routes
add authorization middleware? before routes
remove oled auth from users route