/*
     * * * * * * * * * *
     * user management *
     * * * * * * * * * *
     */

    // addUser
    app.post('/api/addUser', function (req, res, next) {
        req.form.complete(function (err, fields, files) {
            if (err) throw err;
            var valid = 5;

            if (fields.email !== "")
                valid--;
            if (fields.password !== "" || fields.password.length === 40)
                valid--;
            if (/^.+@.+\..+$/.test(fields.email))
                valid--;
            if (fields.company_id !== "")
                valid--;
            if (fields.rank !== "")
                valid--;

            if (valid === 0) {
                db.query('insert into users '+
                    '(company_id, firstname, lastname, email, rank, password) '+
                    'value (?, ?, ?, ?, ?, ?)', [fields.company_id, fields.firstname, fields.lastname, fields.email, fields.rank, fields.password],


                    function (err, insert) {
                        if (err)
                            res.end(JSON.stringify({"status": "failure", "err": err.message}));
                        else
                            var query = "select users.id, users.firstname, users.lastname, \
                                 users.email, users.company_id \
                                 from users\
                                 where users.id=?\
                              ";

                             db.query(query, [insert.insertId],
                                function (err, member) {
                                   respond(res, {"status": "success", "data": member});
                                }
                             );
                    }
                );
            } else {
                respond(res, {"status": "failure", "err": "Bad or not enough parameters"});
            }
        });
    });