Authorize before caching

1 files changed, 2 insertions, 2 deletions

diff --git a/app.js b/app.js
index aabe19f4..74e8611d 100644
--- a/app.js
+++ b/app.js
@@ -122,7 +122,7 @@
 
   app.post('/users', users.create);
 
-  app.get('/:user/edit', cache, authorize, users.edit);
+  app.get('/:user/edit', authorize, cache, users.edit);
 
   app.post('/:user', authorize, users.update);
 
@@ -130,7 +130,7 @@
 
   app.post('/:user/transactions', transactions.create);
 
-  app.get('/:user/report', cache, authorize, transactions.index);
+  app.get('/:user/report', authorize, cache, transactions.index);
 
   app.get('/:user.json', users.json);