function requireAuth(req, res, next) 
{
   if (req.session.userId) 
   {
      return next();
   }
   res.status(401).json({ error: 'Not authenticated' });
}

module.exports = requireAuth;