forgot to port getUserDataByUserSlug
app.checkAccountPermissions middleware; some clean up & bug fixes