Successfully Protected GET /users/:id
* questions remain on what to do w/ password
* include in token?
* how secure it JWT nodejs lib?