User endpoint changes

fix existing user endpoint and don't keep the post user behind auth, an un-authed user needs to create a user. 

add additional /user endpoint for retrieving a single user. There is no guarantee on the express level that there's only 1 user to be returned, the data layer should enforce that

als remove unused passport strategy