I am having application which is separated into USER and ADMIN parts.
There are some admin ROUTES on API and it is completly secured via some ADMIN token.