Require authentication for admin and profile pages

controllers/admin.js

@@ -1,18 +1,19 @@
 'use strict';
 
 
-var AdminModel = require('../models/admin');
+var AdminModel = require('../models/admin'),
+    auth = require('../lib/auth');
 
 
 module.exports = function (app) {
 
     var model = new AdminModel();
 
 
-    app.get('/admin', function (req, res) {
-        
+    app.get('/admin', auth.isAuthenticated('admin'), function (req, res) {
+
         res.render('admin', model);
-        
+
     });
 
 };

controllers/profile.js

@@ -1,18 +1,19 @@
 'use strict';
 
 
-var ProfileModel = require('../models/profile');
+var ProfileModel = require('../models/profile'),
+    auth = require('../lib/auth');
 
 
 module.exports = function (app) {
 
     var model = new ProfileModel();
 
 
-    app.get('/profile', function (req, res) {
-        
+    app.get('/profile', auth.isAuthenticated(), function (req, res) {
+
         res.render('profile', model);
-        
+
     });
 
 };

lib/auth.js

@@ -66,6 +66,7 @@ exports.isAuthenticated = function (role) {
         if (role && req.user.role !== role) {
             res.status(401);
             res.render('errors/401');
+            return;
         }
 
         next();