Add route for accessing user uploaded files
Refactor user authentication to a separate filter