if (!user) {
        const err = {err: 'invalid_headers', des: 'no user in headers'};
        res.send(401, err);
        return next(err);
    }