dont respond w/ password when creating new account
Clean /users route
* better error handling
* authenticateUser func only checks if user exists (no authorization)
Requires Login Before Access GET /users/:id
* must match email & password combo to request user doc
* other get 401