*handle (request, response, next) {
   const authenticatedUser = yield request.session.get('user');
   if(!authenticatedUser){
     log.error('unauthorized access to restricted route:');
     log.error('endpoint: ' + request.originalUrl());
     log.error('method: ' + request.method());
     return response.unauthorized('unauthorized');
   }
   yield next
 }
 function unauthorizedResponse(msg) {
   log.error(msg);
   response.unauthorized(msg);
 }