refactor: cleans up and removes unncessary console.log statement

Addresses a security vulnerability where the `/users/[:id]` route was accessible to users without
the necessary permissions. Adds middleware that protects that route so that only authenticated users
with the MANAGE_USERS and VIEW_WATCHLIST permissions can access other user's profile pages as
intended.

fix #569

server/routes/user/index.ts

@@ -182,7 +182,10 @@ router.post<
   }
 });
 
-router.get<{ id: string }>('/:id', async (req, res, next) => {
+router.get<{ id: string }>(
+  '/:id',
+  isAuthenticated([Permission.MANAGE_USERS, Permission.WATCHLIST_VIEW]),
+  async (req, res, next) => {
     try {
       const userRepository = getRepository(User);
 
@@ -196,7 +199,8 @@ router.get<{ id: string }>('/:id', async (req, res, next) => {
     } catch (e) {
       next({ status: 404, message: 'User not found.' });
     }
-});
+  }
+);
 
 router.use('/:id/settings', userSettingsRoutes);