code: function(options, key) {
          // a protected resource defaults to a 'user' role
          var options = options===true?{ path: key, roles: ['user'] }:options;
          var path = options.path;
  
          // only features that have defined 'path' AND 'roles'
          if (!options.roles || !path) {
              debug("missing %s roles for %s", key, path);
              return;
          }
  
          DEBUG && debug("protect: %s @ %s", key, path)
          router.use(path, function(req,res,next) {
              DEBUG && debug("PROTECTED: %s @ %s -> %j", path, req.path, options.roles);
              EnsureAuthenticated(req, res, false) && EnsureAuthorized(options, req, res, next)
          })
      }
docs: ============================================================================= PROTECT ROUTES