Protect /api/users/:id

Please enter the commit message for your changes. Lines starting