routes.js

// routes/index.js
const express = require('express');
const router = express.Router();

// App routes (for the mobile app)
const APP = express.Router();
router.use('/', APP);

APP.get('/users/:id', isAuthenticated, userController.getUser);

...

// Admin routes (for the admin tool)
const ADMIN = express.Router();
router.use('/admin', ADMIN);

ADMIN.get('/users', isAuthenticated, isAdmin, adminUserController.getUsers);
ADMIN.get('/users/:id', isAuthenticated, isAdmin, adminUserController.getUser);
ADMIN.patch('/users/:id', isAuthenticated, isAdmin, adminUserController.updateUser);
ADMIN.delete('/users/:id', isAuthenticated, isAdmin, adminUserController.deleteUser);

module.exports = router;