Added login validation to /user and /users route.