now when jwtAuth middleware is passed, it will set req.user = user