add ensureAuthenticated()

add ensureAuthenticated route middleware to ensure user is authenticated
add more account field

add nickname, email