if (!req.session || !req.session.user) {
        return res.send(401,JSON.stringify({ok:false, message: "Not currently logged in."}));
      }