router.route('/settings')
  .get(authCtrl.authenticateUser, authCtrl.ensureAdmin, adminCtrl.listSettings)
  .post(authCtrl.authenticateUser, authCtrl.ensureAdmin, adminCtrl.updateSettings);