module.exports = function(req, res, next) {

    if (!req.session || !req.session.userId || !req.user) {
        if (req.originalUrl.startsWith("/api/")) {
            return res.status(401).json({ error: "Je bent niet ingelogd" });
        }

        if (req.session && req.session.userId) {
            delete req.session.userId;
        }

        req.flash("info", "Je sessie is verlopen. Log opnieuw in.");
        return res.redirect("/login");
    }

    next();

};