Protect api routes with auth
Check user token, add email to req body when accessing protected api
Delete commented out unnecessary code