send unauthorized from users/me if req.user doesnt exist
fix api error handling, add support for CORS
implement jwt authentication for api's websocket and http connections