app.use('/api', expressJwt({secret: secret}));