Create isUser middleware.

[Pierre-RA]

Some routes have to be protected by the isUser middleware.
For instance:
DELETE /api/users/1234, the route can only be accessed by someone with a valid token and is the correct user.