TODO Don't let users edit other users' patches. Protect POST, PUT and DELETE routes in patchs.js Try Marty's refactoring suggestions in routes, and renaming suggestions in user model