Ensure client logged in for all data access

controllers/ingredientData.js

@@ -22,6 +22,10 @@ module.exports = {
     //Returns:
     //  ingredients: list containing the newly created ingredients
     createNewIngredients: function(req, res){
+        if(!req.session.user){
+            return res.render("error");
+        }
+
         Ingredient.create(req.body)
             .then((ingredients)=>{
                 return res.json(ingredients);
@@ -40,6 +44,10 @@ module.exports = {
     //Returns:
     //  item: ingredient and quantity
     createIngredient: function(req, res){
+        if(!req.session.user){
+            return res.render("error");
+        }
+        
         Ingredient.create(req.body.ingredient)
             .then((ingredient)=>{
                 Merchant.findOne({_id: req.session.user})

controllers/merchantData.js

@@ -148,28 +148,6 @@ module.exports = {
                         console.log(err);
                         return res.render("error");
                     });
-
-
-                //WTF IS THIS???
-
-                // Recipe.create(newRecipes)
-                //     .then((recipes)=>{
-                //         for(let recipe of recipes){
-                //             newMerchant.recipes.push(recipe);
-                //         }
-                //         newMerchant.save()
-                //                 .then((merchant)=>{
-                //                     return res.redirect("/inventory");
-                //                 })
-                //                 .catch((err)=>{
-                //                     console.log(err);
-                //                     return res.render("error");
-                //                 });
-                //     })
-                //     .catch((err)=>{
-                //         console.log(err);
-                //         return res.render("error");
-                //     });
             })
             .catch((err)=>{
                 console.log(err);

controllers/otherData.js

@@ -10,6 +10,10 @@ module.exports = {
     //Returns:
     //  merchant.inventory: entire merchant inventory after being updated
     createTransaction: function(req, res){
+        if(!req.session.user){
+            return res.render("error");
+        }
+        
         let transaction = new NonPosTransaction({
             date: Date.now(),
             author: "None",