From d14eb0dbaa584f21b786ffbbfbf3fd0dd200994a Mon Sep 17 00:00:00 2001
From: Berkeley Martinez <Berkeley@robotie.com>
Date: Thu, 20 Aug 2015 09:40:03 -0700
Subject: [PATCH] fix 401 account/delete if not auth

---
 server/boot/user.js | 16 +++++++++++-----
 1 file changed, 11 insertions(+), 5 deletions(-)

diff --git a/server/boot/user.js b/server/boot/user.js
index 7976f81891f..158882abc58 100644
--- a/server/boot/user.js
+++ b/server/boot/user.js
@@ -1,9 +1,11 @@
-var _ = require('lodash'),
-    async = require('async'),
-    moment = require('moment'),
-    debug = require('debug')('freecc:cntr:userController');
+import _ from 'lodash';
+import async from 'async';
+import moment from 'moment';
+import debugFactory from 'debug';
 
+import { ifNoUser401 } from '../utils/middleware';
 
+const debug = debugFactory('freecc:boot:user');
 const daysBetween = 1.5;
 
 function calcCurrentStreak(cals) {
@@ -67,7 +69,11 @@ module.exports = function(app) {
   router.get('/email-signup', getEmailSignup);
   router.get('/email-signin', getEmailSignin);
   router.get('/account/api', getAccountAngular);
-  router.post('/account/delete', postDeleteAccount);
+  router.post(
+    '/account/delete',
+    ifNoUser401,
+    postDeleteAccount
+  );
   router.get('/account/unlink/:provider', getOauthUnlink);
   router.get('/account', getAccount);
   // Ensure this is the last route!