static isAdmin(req, res, next) {
    if (req.user.type !== 1) {
      return res.status(401).json({ message: 'Unauthorized' });
    }
    next();