removed userlist route and middleware