- this function should `return` instead of `res`
 - rename `success` to `message`