remove token if needed

app/api/me/route.ts

@@ -17,6 +17,8 @@ export async function GET() {
   const HF_ADMIN = process?.env?.HF_ADMIN?.split(',') ?? []
   const is_admin = res?.sub ? HF_ADMIN.includes(res?.sub) : false
 
+  if (!res?.sub) return Response.json({ status: 401, ok: false, message: "Unauthorized" });
+
   return Response.json(
     {
       user: {