apiRoutes.post('/user/new', function(req, res) {
  var token = getToken(req.headers);
  if (token) {
      var decoded = jwt.decode(token, config.secret);
      if (!req.body.phone || !req.body.password) {
        res.json({success: false, msg: 'Please pass name and password.'});
      } else {
        var newUser = new User({
            firstName: req.body.firstName,
            lastName: req.body.lastName,
            role: req.body.role,
            email: req.body.email,
            phone: req.body.phone,
            password: req.body.password,
            active: req.body.active,
        });
        // save the user
        newUser.save(function(err) {
          if (err) {
            console.log(err);
            return res.json({success: false, msg: err.message});
          }
          res.json({success: true, msg: 'Successful created new user.'});
        });
      }
  } else {
    return res.status(403).send({success: false, msg: 'No token provided.'});
  }
});