@User before.

res.send

sends a response to the client. Also, this is an example API that does session verification. You don't actually need this API.