feat: #6 Secure the /user route and return only infos on the currently
logged in user