router.route('/entities/:entityId')
  .get(authCtrl.authenticateUser, authCtrl.ensureAdmin, adminCtrl.showEntity)
  .post(authCtrl.authenticateUser, authCtrl.ensureAdmin, adminCtrl.updateEntity)
  .delete(authCtrl.authenticateUser, authCtrl.ensureAdmin, adminCtrl.deleteEntity);