feat: #6 Check token when api calls. The /user routes return only the logged in user data