Mlab 486

• loggedInUser global variable is deleted.
• getLoggedInUserData(email) method is added.
• Authentication checking when accessing a protected page is done only using req.isAuthenticated().
• As the result, getLoggedInUserData(email) should be called whenever a protected page is accessed. This approach might be heavier for the system, but it is more secure.

routes/api_TBD.js

-// ==== USER ACOOUNT API ====
-var dbconn = require('./dbconn')
-module.exports = function (app) {
-
-    //console.log(dbconn);
-    //var con = dbconn.connection
-    
-    app.get('/api/v1/profile', function (req, res) {
-        if (req.isAuthenticated()) {
-            // read data based on email
-            dbconn.user.query('SELECT * FROM user WHERE email="'+req.user.email+'"', function (err, rows, fields) {
-                if (err) throw err
-                res.send(rows[0])
-            })
-        } else {
-          res.send('authentication required');
-        }
-    });
-    
-}
\ No newline at end of file