create API end-point that returns facility of logged in user