fixed auth bugs and aded GET /user method to get information about the current user