Added authorization pieces + test functions

routes/api/queue/index.js

@@ -1,7 +1,7 @@
 const express = require('express');
 const Comment = require('../../../models/comment');
-
 const Setting = require('../../../models/setting');
+const authorization = require('../../../middleware/authorization');
 
 const router = express.Router();
 
@@ -13,7 +13,7 @@ const router = express.Router();
 // depending on the settings. The :moderation overwrites this settings.
 // Pre-moderation:  New comments are shown in the moderator queues immediately.
 // Post-moderation: New comments do not appear in moderation queues unless they are flagged by other users.
-router.get('/comments/pending', (req, res, next) => {
+router.get('/comments/pending', authorization.needed('admin'), (req, res, next) => {
   Setting.getModerationSetting().then(function({moderation}){
     Comment.moderationQueue(moderation).then((comments) => {
       res.status(200).json(comments);