docs: function adminsOnly(req, res, next) {
    if (req.session && _.contains(req.session.user.roles, 'admin')) {
      next();
    }
    else {
      res.status(401).send('Only administrators can access this resource');
    }
  }