User's instance method getJSON

Removes sensitive data from the response.
Started using getJSON in the controller, also implemented a /me route.
Added Session support.