add acceptance of params in get request

hacking the `get` s without auth, usable on mobile request
it's really hacking to do it this way but i'm really not sure about how to build a request with authentification coz i've been studying the web req/res for the last 3 hours but i didn't figured out how could the server authenticate the request ONLY by parameters or cookies or something unlike sessions.
regret for this.
Express manage auth by function req.isAuthenticated().
Read the config in passport, there's a block "local strategy". It is a middleware of passport.
So you can assume that is the passport in req manage the auth.