router.route('/clients')
  .get(authCtrl.authenticateUser, authCtrl.ensureAdmin, adminCtrl.listClients)
  .post(authCtrl.authenticateUser, authCtrl.ensureAdmin, adminCtrl.createClient);