router.route('/entities')
  .get(authCtrl.authenticateUser, authCtrl.ensureAdmin, adminCtrl.listEntities)
  .post(authCtrl.authenticateUser, authCtrl.ensureAdmin, adminCtrl.createEntity);