Adding explaination of req.user and req.session.user
Adding TODO