Put the req.login() back inside the user.save() callback in user-routes.js