* simplify protection of endpoints * role discernment still occures in respective handlers * db client needs to be passed into handlers as a global var now