router.route('/admin/message/:msgId')
    .get(   users.hasAccess, messages.read)
    .post(  users.hasAdminAccess, messages.update)
    .delete(users.hasAdminAccess, messages.delete);