added users.requireslogin middleware to users.server.controller