middleware(['auth:user-api', 'scope:only-user']); } }