created auth handler for server and added to get user route