diff --git a/.env.example b/.env.example
new file mode 100644
index 00000000..2fc4c506
--- /dev/null
+++ b/.env.example
@@ -0,0 +1 @@
+IMGUR_CLIENT_ID=SKIP
\ No newline at end of file
diff --git a/Procfile b/Procfile
new file mode 100644
index 00000000..6feca7ec
--- /dev/null
+++ b/Procfile
@@ -0,0 +1 @@
+web: NODE_ENV=production node app.js
\ No newline at end of file
diff --git a/_helpers.js b/_helpers.js
index 798e5325..61e51b67 100644
--- a/_helpers.js
+++ b/_helpers.js
@@ -1,12 +1,12 @@
 function ensureAuthenticated(req) {
-  return req.isAuthenticated();
+  return req.isAuthenticated()
 }
 
 function getUser(req) {
-  return req.user;
+  return req.user
 }
 
 module.exports = {
   ensureAuthenticated,
   getUser,
-};
\ No newline at end of file
+}
diff --git a/app.js b/app.js
index f70e64d6..292c666b 100644
--- a/app.js
+++ b/app.js
@@ -1,11 +1,44 @@
 const express = require('express')
+const handlebars = require('express-handlebars')
+const methodOverride = require('method-override')
+const flash = require('connect-flash')
+const helpers = require('./_helpers')
+
+if (process.env.NODE_ENV !== 'production') {
+  require('dotenv').config()
+}
+const session = require('express-session')
+const passport = require('./config/passport')
+
 const app = express()
-const port = 3000
+const port = process.env.PORT || 3000
+
+app.engine('handlebars', handlebars({
+  defaultLayout:'main',
+  helpers: require('./config/handlebars-helpers')
+}))
+app.set('view engine', 'handlebars')
+
+app.use(express.urlencoded({ extended: true }))
+app.use(session({ secret: 'secret', resave: false, saveUninitialized: false }))
+app.use(passport.initialize())
+app.use(passport.session())
+app.use(flash())
+app.use(methodOverride('_method'))
+app.use('/upload', express.static(__dirname + '/upload'))
+
+app.use((req, res, next) => {
+  res.locals.success_messages = req.flash('success_messages')
+  res.locals.error_messages = req.flash('error_messages')
+  res.locals.user = helpers.getUser(req)
+  next()
+})
+
 
 app.listen(port, () => {
   console.log(`Example app listening at http://localhost:${port}`)
 })
 
-require('./routes')(app)
+require('./routes')(app, passport)
 
 module.exports = app
diff --git a/config/config.json b/config/config.json
index 93cd6cd8..fc012f3e 100644
--- a/config/config.json
+++ b/config/config.json
@@ -7,11 +7,14 @@
     "dialect": "mysql"
   },
   "production": {
-    "username": "root",
-    "password": null,
-    "database": "database_production",
-    "host": "127.0.0.1",
-    "dialect": "mysql"
+    "use_env_variable": "CLEARDB_DATABASE_URL",
+    "dialect": "postgres",
+    "protocol": "postgres",
+    "dialectOptions": {
+      "ssl": {
+        "rejectUnauthorized": false
+      }
+    }
   },
   "travis": {
     "username": "travis",
diff --git a/config/handlebars-helpers.js b/config/handlebars-helpers.js
new file mode 100644
index 00000000..9704bb70
--- /dev/null
+++ b/config/handlebars-helpers.js
@@ -0,0 +1,18 @@
+const moment = require('moment')
+
+module.exports = {
+  ifCond: function(a, b , options) {
+    if(a === b) {
+      return options.fn(this)
+    }
+    return options.inverse(this)
+  },
+
+  moment: function(a) {
+    return moment(a).fromNow()
+  },
+
+  count: function (a) {
+    return a.length
+  }
+}
\ No newline at end of file
diff --git a/config/passport.js b/config/passport.js
new file mode 100644
index 00000000..6c839911
--- /dev/null
+++ b/config/passport.js
@@ -0,0 +1,32 @@
+const passport = require('passport')
+const LocalStrategy = require('passport-local')
+const bcrypt = require('bcryptjs')
+const db = require('../models')
+const User = db.User
+
+passport.use(new LocalStrategy(
+  {
+    usernameField: 'email',
+    passwordField: 'password',
+    passReqToCallback: true
+  },
+  (req, username, password, cb) => {
+    User.findOne({ where: { email: username } }).then(user => {
+      if (!user) return cb(null, false, req.flash('error_messages', '帳號或密碼輸入錯誤'))
+      if (!bcrypt.compareSync(password, user.password)) return cb(null, false, req.flash('error_messages', '帳號或密碼輸入錯誤！'))
+      return cb(null, user)
+    })
+  }
+))
+
+passport.serializeUser((user, cb) => {
+  cb(null, user.id)
+})
+passport.deserializeUser((id, cb) => {
+  User.findByPk(id).then(user => {
+    user = user.toJSON()
+    return cb(null, user)
+  })
+})
+
+module.exports = passport
\ No newline at end of file
diff --git a/controllers/adminController.js b/controllers/adminController.js
new file mode 100644
index 00000000..bd617eb1
--- /dev/null
+++ b/controllers/adminController.js
@@ -0,0 +1,173 @@
+const imgur = require('imgur-node-api')
+const IMGUR_CLIENT_ID = process.env.IMGUR_CLIENT_ID
+
+const db = require('../models')
+const Restaurant = db.Restaurant
+const User = db.User
+const Category = db.Category
+
+const adminController = {
+  getRestaurants: (req, res) => {
+    return Restaurant.findAll({ 
+      raw: true ,
+      nest: true,
+      include: [Category]
+    }).then(restaurants => {
+      return res.render('admin/restaurants', { restaurants: restaurants })
+    })
+  },
+  createRestaurant: (req, res) => {
+    Category.findAll({
+      raw:true,
+      nest:true,
+    }).then(categories => {
+      return res.render('admin/create',{
+        categories: categories
+      })
+    })
+  },
+  postRestaurant: (req, res) => {
+    if (!req.body.name) {
+      req.flash('error_messages', "name didn't exist")
+      return res.redirect('back')
+    }
+
+    const { file } = req
+    if (file) {
+      imgur.setClientID(IMGUR_CLIENT_ID);
+      imgur.upload(file.path, (err, img) => {
+        return Restaurant.create({
+          name: req.body.name,
+          tel: req.body.tel,
+          address: req.body.address,
+          opening_hours: req.body.opening_hours,
+          description: req.body.description,
+          image: file ? img.data.link : null,
+          CategoryId: req.body.categoryId
+        }).then((restaurant) => {
+          req.flash('success_messages', 'restaurant was successfully created')
+          return res.redirect('/admin/restaurants')
+        })
+      })
+    }
+    else {
+      return Restaurant.create({
+        name: req.body.name,
+        tel: req.body.tel,
+        address: req.body.address,
+        opening_hours: req.body.opening_hours,
+        description: req.body.description,
+        image: null,
+        CategoryId: req.body.categoryId
+      }).then((restaurant) => {
+        req.flash('success_messages', 'restaurant was successfully created')
+        return res.redirect('/admin/restaurants')
+      })
+    }
+  },
+  getRestaurant: (req, res) => {
+    return Restaurant.findByPk(req.params.id, {
+      include: [Category]
+    }).then(restaurant => {
+      return res.render('admin/restaurant', {
+        restaurant: restaurant.toJSON()
+      })
+    })
+  },
+  editRestaurant: (req, res) => {
+    Category.findAll({
+      raw: true,
+      nest: true
+    }).then(categories => {
+      return Restaurant.findByPk(req.params.id).then(restaurant => {
+        return res.render('admin/create', {
+          categories: categories,
+          restaurant: restaurant.toJSON()
+        })
+      })
+    })
+  },
+  putRestaurant: (req, res) => {
+    if (!req.body.name) {
+      req.flash('error_messages', "name didn't exist")
+      return res.redirect('back')
+    }
+
+    const { file } = req
+    if (file) {
+      imgur.setClientID(IMGUR_CLIENT_ID);
+      imgur.upload(file.path, (err, img) => {
+        return Restaurant.findByPk(req.params.id)
+          .then((restaurant) => {
+            restaurant.update({
+              name: req.body.name,
+              tel: req.body.tel,
+              address: req.body.address,
+              opening_hours: req.body.opening_hours,
+              description: req.body.description,
+              image: file ? img.data.link : restaurant.image,
+              CategoryId: req.body.categoryId
+            })
+              .then((restaurant) => {
+                req.flash('success_messages', 'restaurant was successfully to update')
+                res.redirect('/admin/restaurants')
+              })
+          })
+      })
+    }
+    else {
+      return Restaurant.findByPk(req.params.id)
+        .then((restaurant) => {
+          restaurant.update({
+            name: req.body.name,
+            tel: req.body.tel,
+            address: req.body.address,
+            opening_hours: req.body.opening_hours,
+            description: req.body.description,
+            image: restaurant.image,
+            CategoryId: req.body.categoryId
+          })
+            .then((restaurant) => {
+              req.flash('success_messages', 'restaurant was successfully to update')
+              res.redirect('/admin/restaurants')
+            })
+        })
+    }
+  },
+  deleteRestaurant: (req, res) => {
+    return Restaurant.findByPk(req.params.id)
+    .then((restaurant) => {
+      restaurant.destroy()
+      .then((restaurant) => {
+        res.redirect('/admin/restaurants')
+      })
+    })
+  },
+  getUsers: (req, res) => {
+    return User.findAll({raw:true})
+    .then(users => {
+      return res.render('admin/users', {
+        users: users
+      })
+    })
+  },
+  toggleAdmin: (req, res) => {
+    return User.findByPk(req.params.id)
+    .then((user) => {
+      if(user.email === 'root@example.com'){
+        req.flash('error_messages', '禁止變更管理者權限')
+        return res.redirect('back')
+      }else if(user.isAdmin) {
+        user.update({isAdmin: false})
+        req.flash('success_messages', '使用者權限變更成功')
+        res.redirect('/admin/users')
+      }else{
+        user.update({isAdmin: true})
+        req.flash('success_messages', '使用者權限變更成功')
+        res.redirect('/admin/users')
+      }
+    })
+  }
+}
+
+module.exports = adminController
\ No newline at end of file
diff --git a/controllers/categoryController.js b/controllers/categoryController.js
new file mode 100644
index 00000000..0e5e5ff8
--- /dev/null
+++ b/controllers/categoryController.js
@@ -0,0 +1,59 @@
+const db = require('../models')
+const Category = db.Category
+let categoryController = {
+  getCategories: (req, res) => {
+    return Category.findAll({
+      raw: true,
+      nest: true
+    }).then(categories => {
+      if (req.params.id) {
+        Category.findByPk(req.params.id)
+          .then((category) => {
+            return res.render('admin/categories', {
+              categories: categories,
+              category: category.toJSON()
+            })
+          })
+      } else {
+        return res.render('admin/categories', { categories: categories })
+      }
+    })
+  },
+  postCategory: (req, res) => {
+    if (!req.body.name) {
+      req.flash('error_message', 'name didn\'t exist')
+      return res.redirect('back')
+    } else {
+      return Category.create({
+        name: req.body.name
+      }).then((category) => {
+        res.redirect('/admin/categories')
+      })
+    }
+  },
+  putCategory: (req, res) => {
+    if (!req.body.name) {
+      req.flash('error_messages', 'name didn\'t exist')
+      return res.redirect('back')
+    } else {
+      return Category.findByPk(req.params.id)
+        .then((category) => {
+          category.update(req.body)
+            .then((category) => {
+              res.redirect('/admin/categories')
+            })
+        })
+    }
+  },
+  deleteCategory: (req, res) => {
+    return Category.findByPk(req.params.id)
+      .then((category) => {
+        category.destroy()
+        .then((category) => {
+          res.redirect('/admin/categories')
+        })
+      })
+  }
+}
+
+module.exports = categoryController
\ No newline at end of file
diff --git a/controllers/commentController.js b/controllers/commentController.js
new file mode 100644
index 00000000..68e412c3
--- /dev/null
+++ b/controllers/commentController.js
@@ -0,0 +1,26 @@
+const db = require('../models')
+const Comment = db.Comment
+
+const commentController = {
+  postComment: (req, res) => {
+    return Comment.create({
+      text: req.body.text,
+      RestaurantId: req.body.restaurantId,
+      UserId: req.user.id
+    })
+      .then((comment) => {
+        res.redirect(`/restaurants/${req.body.restaurantId}`)
+      })
+  },
+  deleteComment: (req, res) => {
+    return Comment.findByPk(req.params.id)
+      .then((comment) => {
+        comment.destroy()
+          .then((comment) => {
+            res.redirect(`/restaurants/${comment.RestaurantId}`)
+          })
+      })
+  }
+}
+
+module.exports = commentController
\ No newline at end of file
diff --git a/controllers/restController.js b/controllers/restController.js
new file mode 100644
index 00000000..137a77c6
--- /dev/null
+++ b/controllers/restController.js
@@ -0,0 +1,109 @@
+const { date } = require('faker')
+const db = require('../models')
+const Restaurant = db.Restaurant
+const Category = db.Category
+const Comment = db.Comment
+const User = db.User
+
+const pageLimit = 10 
+
+const restController = {
+  getRestaurants: (req, res) => {
+    let offset = 0
+    const whereQuery = {}
+    let categoryId = ''
+    if (req.query.page) {
+      offset = (req.query.page - 1) * pageLimit
+    }
+    if (req.query.categoryId) {
+      categoryId = Number(req.query.categoryId)
+      whereQuery.categoryId = categoryId
+    }
+    Restaurant.findAndCountAll(({
+      include: Category,
+      where: whereQuery,
+      offset: offset,
+      limit: pageLimit
+    })).then(result => {
+      const page = Number(req.query.page) || 1
+      const pages = Math.ceil(result.count / pageLimit)
+      const totalPage = Array.from({ length: pages }).map((item, index) => index + 1)
+      const prev = page - 1 < 1 ? 1 : page - 1
+      const next = page + 1 > pages ? pages : page + 1
+
+      const data = result.rows.map(r => ({
+        ...r.dataValues,
+        description: r.dataValues.description.substring(0, 50),
+        categoryName: r.dataValues.Category.name
+      }))
+      Category.findAll({
+        raw: true,
+        nest: true
+      }).then(categories => {
+        return res.render('restaurants', {
+          restaurants: data,
+          categories: categories,
+          categoryId: categoryId,
+          page: page,
+          totalPage: totalPage,
+          prev: prev,
+          next: next
+        })
+      })
+    })
+  },
+  getRestaurant: (req, res) => {
+    return Restaurant.findByPk(req.params.id, {
+      include: [
+        Category,
+        { model: Comment, include: [User] }
+      ]
+    }).then(restaurant => {
+      restaurant.increment('viewCounts')
+      return res.render('restaurant', {
+        restaurant: restaurant.toJSON(),
+      })
+    })
+  },
+  getFeeds: (req, res) => {
+    return Promise.all([
+      Restaurant.findAll({
+        limit: 10,
+        raw: true,
+        nest: true,
+        order: [['createdAt', 'DESC']],
+        include: [Category]
+      }).then(restaurants => {
+        Comment.findAll({
+          limit: 10,
+          raw: true,
+          nest: true,
+          order: [['createdAt', 'DESC']],
+          include: [User, Restaurant]
+        }).then(comments => {
+          return res.render('feeds', {
+            restaurants: restaurants,
+            comments: comments
+          })
+        })
+      })
+    ])
+  },
+  getDashBoard: (req, res) => {
+    return Restaurant.findByPk (req.params.id, {include: [Category]})
+    .then (restaurant => {
+      Comment.findAll({ 
+        where: {RestaurantId: restaurant.id},
+        raw: true,
+        nest: true
+      }). then(comments => {
+        return res.render('dashboard', {
+          restaurant: restaurant.toJSON(),
+          counts: comments.length
+        })
+      })
+    })
+  }
+}
+
+module.exports = restController
\ No newline at end of file
diff --git a/controllers/userController.js b/controllers/userController.js
new file mode 100644
index 00000000..53cafbe1
--- /dev/null
+++ b/controllers/userController.js
@@ -0,0 +1,115 @@
+const bcrypt = require('bcryptjs')
+const { rawListeners } = require('superagent')
+const db = require('../models')
+const User = db.User
+const Comment = db.Comment
+const Restaurant = db.Restaurant
+const imgur = require('imgur-node-api')
+const IMGUR_CLIENT_ID = process.env.IMGUR_CLIENT_ID
+
+const userController = {
+  signUpPage: (req, res) => {
+    return res.render('signup')
+  },
+
+  signUp: (req, res) => {
+    if(req.body.passwordCheck !== req.body.password){
+      req.flash('error_messages', '兩次密碼輸入不同!')
+      return res.redirect('/signup')
+    } else {
+      User.findOne({where: {email: req.body.email}})
+        .then(user => {
+          if(user){
+            req.flash('error_messages','信箱重複!')
+            return res.redirect('/signup')
+          } else {
+            User.create({
+              name: req.body.name,
+              email: req.body.email,
+              password: bcrypt.hashSync(req.body.password, bcrypt.genSaltSync(10), null)
+            }).then(user => {
+              req.flash('success_messages', '成功註冊帳號!')
+              return res.redirect('/signin')
+            })
+          }
+      })
+    }
+  },
+
+  signInPage: (req, res) => {
+    return res.render('signin')
+  },
+
+  signIn: (req, res) => {
+    req.flash('success_messages', '成功登入！')
+    res.redirect('/restaurants')
+  },
+
+  logout: (req, res) => {
+    req.flash('success_messages', '登出成功！')
+    req.logout()
+    res.redirect('/signin')
+  },
+
+  getUser: (req, res) => {
+    return User.findByPk(req.params.id,{
+      include: [
+        { model: Comment, include: [Restaurant]}
+      ]
+    })
+      .then(user => {
+        return res.render('profile', {
+          user: user.toJSON()
+        })
+      })
+  },
+
+  editUser: (req, res) => {
+    return User.findByPk(req.params.id)
+      .then(user => {
+        return res.render('edit', {
+          user: user.toJSON()
+        })
+      })
+  },
+
+  putUser: (req, res) => {
+    if(!req.body.name) {
+      req.flash('error_messages', "name didn't exist")
+      return res.redirect('back')
+    }
+    const {file} = req
+
+    if(file) {
+      imgur.setClientID(IMGUR_CLIENT_ID)
+      imgur.upload(file.path, (err, img) => {
+        return User.findByPk(req.params.id)
+          .then((user) => {
+            user.update({
+              name: req.body.name,
+              email: req.body.email,
+              image: file ? img.data.link : user.image
+            }).then((user) => {
+              req.flash('success_messages', '使用者資料編輯成功')
+              res.redirect(`/users/${req.params.id}`)
+            })
+          })
+      })
+    } else {
+      return User.findByPk(req.params.id)
+        .then((user) => {
+          user.update({
+            name: req.body.name,
+            email: req.body.email,
+            image: user.image
+          })
+            .then((user) => {
+              req.flash('success_messages', '使用者資料編輯成功')
+              res.redirect(`/users/${req.params.id}`)
+          })
+        })
+    } 
+  }
+}
+
+module.exports = userController
diff --git a/helpers/unitTestHelpers.js b/helpers/unitTestHelpers.js
new file mode 100644
index 00000000..4a777f4c
--- /dev/null
+++ b/helpers/unitTestHelpers.js
@@ -0,0 +1,107 @@
+const SequelizeMock = require('sequelize-mock')
+const proxyquire = require('proxyquire')
+const sinon = require('sinon')
+
+const dbMock = new SequelizeMock()
+
+const createModelMock = (name, defaultValue, data, joinedTableName) => {
+  const mockModel = dbMock.define(name, defaultValue, {
+    instanceMethods: {
+      update: (changes) => {
+        mockModel._defaults = {...changes}
+        return Promise.resolve()
+      }
+    }
+  });
+
+  // 模擬 Sequelize 行為
+  // 將 mock user db 中的 findByPK 用 findOne 取代 (sequelize mock not support findByPK)
+  mockModel.findByPk = (id) => mockModel.findOne({where: {id: id}})
+  // 將 count 的 function 預設回傳假資料數目 1
+  mockModel.count = () => 1
+  // 因為 mock 中的 create 有問題，因此指向 upsert function, 這樣可以在 useHandler 中取得 create 呼叫
+  mockModel.create = mockModel.upsert
+
+  // modify middleware
+  if (joinedTableName) {
+    mockModel.$queryInterface.$useHandler((query, queryOptions) => {
+      if (query === 'upsert') {
+        // 新增 joinTable 資料到模擬資料
+        const {UserId, RestaurantId} = queryOptions[0];
+        const restaurant = data.find(d => d.id === RestaurantId)
+        restaurant[joinedTableName].push({UserId: UserId});
+        return Promise.resolve(data.map(d => mockModel.build(d)))
+      } else if (query === 'findAll') {
+        // 回傳模擬資料
+        if (!data) {
+          return mockModel.build([defaultValue]);
+        }
+        return Promise.resolve( data ? data.map(d => mockModel.build(d)) : [])
+      }else if (query === 'destroy') {
+        // destroy 可以從 where 取得要刪除的資料
+        // 因此就可以模擬將模擬資料中的資料刪除
+        // 刪除模擬資料中的某一筆 joinTable 資料
+        const {UserId, RestaurantId} = queryOptions[0].where;
+        const restaurant = data.find(d => d.id === RestaurantId)
+        restaurant[joinedTableName] = restaurant[joinedTableName].filter(d => !(d.UserId === UserId))
+        return Promise.resolve(data.map(d => mockModel.build(d)))
+      }
+    });
+  } else {
+    mockModel.$queryInterface.$useHandler((query, queryOptions,done) => {
+      if (query === 'upsert') {
+        // create 時會帶 userId 跟 restaurantId (ex: Like.create({ userId: 1, restaurantId: 2}))
+        const {UserId, RestaurantId} = queryOptions[0]
+        
+        // 新增這個 Like 的資訊到模擬資料裡
+        data.push({ UserId, RestaurantId })
+        
+        // 回傳模擬資料
+        return Promise.resolve(mockModel.build(data))
+      } else if (query === 'findAll') {
+        // 回傳模擬資料
+        if (!data) {
+          return mockModel.build([defaultValue]);
+        }
+        return Promise.resolve(data ? data.map(d => mockModel.build(d)) : [])
+      } else if (query === 'destroy') {
+        // destroy 可以從 where 取得要刪除的資料
+        // 因此就可以模擬將模擬資料中的資料刪除
+        const {UserId, RestaurantId} = queryOptions[0].where
+        data = data.filter(d => !(d.UserId === UserId && d.RestaurantId === RestaurantId))
+  
+        return Promise.resolve(mockModel.build(data))
+      }
+    });
+  }
+
+  return mockModel;
+}
+
+const createControllerProxy = (path, model) => {
+  const controller = proxyquire(path, {
+    '../models': model
+  });
+
+  return controller;
+}
+
+const mockRequest = (query) => {
+  return {
+    ...query,
+    flash: sinon.spy(),
+  }
+}
+const mockResponse = () => {
+  return {
+    redirect: sinon.spy(),
+    render: sinon.spy(),
+  }
+}
+
+module.exports = {
+  createModelMock,
+  createControllerProxy,
+  mockRequest,
+  mockResponse
+}
\ No newline at end of file
diff --git a/migrations/20211110123023-create-user.js b/migrations/20211110123023-create-user.js
new file mode 100644
index 00000000..58a162b2
--- /dev/null
+++ b/migrations/20211110123023-create-user.js
@@ -0,0 +1,33 @@
+'use strict';
+module.exports = {
+  up: async (queryInterface, Sequelize) => {
+    await queryInterface.createTable('Users', {
+      id: {
+        allowNull: false,
+        autoIncrement: true,
+        primaryKey: true,
+        type: Sequelize.INTEGER
+      },
+      name: {
+        type: Sequelize.STRING
+      },
+      email: {
+        type: Sequelize.STRING
+      },
+      password: {
+        type: Sequelize.STRING
+      },
+      createdAt: {
+        allowNull: false,
+        type: Sequelize.DATE
+      },
+      updatedAt: {
+        allowNull: false,
+        type: Sequelize.DATE
+      }
+    });
+  },
+  down: async (queryInterface, Sequelize) => {
+    await queryInterface.dropTable('Users');
+  }
+};
\ No newline at end of file
diff --git a/migrations/20211111131156-add-isAdmin-to-users.js b/migrations/20211111131156-add-isAdmin-to-users.js
new file mode 100644
index 00000000..cf0f7606
--- /dev/null
+++ b/migrations/20211111131156-add-isAdmin-to-users.js
@@ -0,0 +1,14 @@
+'use strict';
+
+module.exports = {
+  up: async (queryInterface, Sequelize) => {
+    await queryInterface.addColumn('Users', 'isAdmin',{
+      type: Sequelize.BOOLEAN,
+      defaultValue: false,
+    })
+  },
+
+  down: async (queryInterface, Sequelize) => {
+    await queryInterface.removeColumn('Users', 'isAdmin')
+  }
+};
diff --git a/migrations/20211111135448-create-restaurant.js b/migrations/20211111135448-create-restaurant.js
new file mode 100644
index 00000000..9ae279d5
--- /dev/null
+++ b/migrations/20211111135448-create-restaurant.js
@@ -0,0 +1,39 @@
+'use strict';
+module.exports = {
+  up: async (queryInterface, Sequelize) => {
+    await queryInterface.createTable('Restaurants', {
+      id: {
+        allowNull: false,
+        autoIncrement: true,
+        primaryKey: true,
+        type: Sequelize.INTEGER
+      },
+      name: {
+        type: Sequelize.STRING
+      },
+      tel: {
+        type: Sequelize.STRING
+      },
+      address: {
+        type: Sequelize.STRING
+      },
+      opening_hours: {
+        type: Sequelize.STRING
+      },
+      description: {
+        type: Sequelize.TEXT
+      },
+      createdAt: {
+        allowNull: false,
+        type: Sequelize.DATE
+      },
+      updatedAt: {
+        allowNull: false,
+        type: Sequelize.DATE
+      }
+    });
+  },
+  down: async (queryInterface, Sequelize) => {
+    await queryInterface.dropTable('Restaurants');
+  }
+};
\ No newline at end of file
diff --git a/migrations/20211113032819-add-image-to-restaurants.js b/migrations/20211113032819-add-image-to-restaurants.js
new file mode 100644
index 00000000..3e9ed891
--- /dev/null
+++ b/migrations/20211113032819-add-image-to-restaurants.js
@@ -0,0 +1,13 @@
+'use strict';
+
+module.exports = {
+  up: async (queryInterface, Sequelize) => {
+    await queryInterface.addColumn('Restaurants', 'image', {
+      type: Sequelize.STRING
+    })
+  },
+
+  down: async (queryInterface, Sequelize) => {
+    await queryInterface.removeColumn('Restaurants', 'image');
+  }
+};
diff --git a/migrations/20211115120933-create-category.js b/migrations/20211115120933-create-category.js
new file mode 100644
index 00000000..ab0ee89a
--- /dev/null
+++ b/migrations/20211115120933-create-category.js
@@ -0,0 +1,27 @@
+'use strict';
+module.exports = {
+  up: async (queryInterface, Sequelize) => {
+    await queryInterface.createTable('Categories', {
+      id: {
+        allowNull: false,
+        autoIncrement: true,
+        primaryKey: true,
+        type: Sequelize.INTEGER
+      },
+      name: {
+        type: Sequelize.STRING
+      },
+      createdAt: {
+        allowNull: false,
+        type: Sequelize.DATE
+      },
+      updatedAt: {
+        allowNull: false,
+        type: Sequelize.DATE
+      }
+    });
+  },
+  down: async (queryInterface, Sequelize) => {
+    await queryInterface.dropTable('Categories');
+  }
+};
\ No newline at end of file
diff --git a/migrations/20211115121141-add-categoryId-to-restaurant.js b/migrations/20211115121141-add-categoryId-to-restaurant.js
new file mode 100644
index 00000000..ae88a84c
--- /dev/null
+++ b/migrations/20211115121141-add-categoryId-to-restaurant.js
@@ -0,0 +1,18 @@
+'use strict';
+
+module.exports = {
+  up: async (queryInterface, Sequelize) => {
+    await queryInterface.addColumn('Restaurants', 'CategoryId',{
+      type: Sequelize.INTEGER,
+      allowNull: false,
+      references: {
+        model:'Categories',
+        key:'id'
+      }
+    })
+  },
+
+  down: async (queryInterface, Sequelize) => {
+    await queryInterface.removeColumn('Restaurants', 'CategoryId')
+  }
+};
diff --git a/migrations/20211120071344-create-comment.js b/migrations/20211120071344-create-comment.js
new file mode 100644
index 00000000..8e42b57c
--- /dev/null
+++ b/migrations/20211120071344-create-comment.js
@@ -0,0 +1,33 @@
+'use strict';
+module.exports = {
+  up: async (queryInterface, Sequelize) => {
+    await queryInterface.createTable('Comments', {
+      id: {
+        allowNull: false,
+        autoIncrement: true,
+        primaryKey: true,
+        type: Sequelize.INTEGER
+      },
+      text: {
+        type: Sequelize.STRING
+      },
+      UserId: {
+        type: Sequelize.INTEGER
+      },
+      RestaurantId: {
+        type: Sequelize.INTEGER
+      },
+      createdAt: {
+        allowNull: false,
+        type: Sequelize.DATE
+      },
+      updatedAt: {
+        allowNull: false,
+        type: Sequelize.DATE
+      }
+    });
+  },
+  down: async (queryInterface, Sequelize) => {
+    await queryInterface.dropTable('Comments');
+  }
+};
\ No newline at end of file
diff --git a/migrations/20211121020156-add-image-to-userModel.js b/migrations/20211121020156-add-image-to-userModel.js
new file mode 100644
index 00000000..d9c35c00
--- /dev/null
+++ b/migrations/20211121020156-add-image-to-userModel.js
@@ -0,0 +1,13 @@
+'use strict';
+
+module.exports = {
+  up: async (queryInterface, Sequelize) => {
+    await queryInterface.addColumn('Users', 'image', {
+      type: Sequelize.STRING
+    })
+  },
+
+  down: async (queryInterface, Sequelize) => {
+    await queryInterface.removeColumn('Users', 'image')
+  }
+};
diff --git a/migrations/20211124121134-add-viewCounts-to-restaurants.js b/migrations/20211124121134-add-viewCounts-to-restaurants.js
new file mode 100644
index 00000000..8e267272
--- /dev/null
+++ b/migrations/20211124121134-add-viewCounts-to-restaurants.js
@@ -0,0 +1,13 @@
+'use strict';
+
+module.exports = {
+  up: async (queryInterface, Sequelize) => {
+    await queryInterface.addColumn('Restaurants','viewCounts', {
+       type: Sequelize.INTEGER,
+      defaultValue: 0 })
+  },
+
+  down: async (queryInterface, Sequelize) => {
+    await queryInterface.removeColumn('Restaurants', 'viewCounts')
+  }
+};
diff --git a/models/category.js b/models/category.js
new file mode 100644
index 00000000..aded2ec5
--- /dev/null
+++ b/models/category.js
@@ -0,0 +1,19 @@
+'use strict';
+const {
+  Model
+} = require('sequelize');
+module.exports = (sequelize, DataTypes) => {
+  class Category extends Model {
+  
+    static associate(models) {
+     Category.hasMany(models.Restaurant)
+    }
+  };
+  Category.init({
+    name: DataTypes.STRING
+  }, {
+    sequelize,
+    modelName: 'Category',
+  });
+  return Category;
+};
\ No newline at end of file
diff --git a/models/comment.js b/models/comment.js
new file mode 100644
index 00000000..41b4ca37
--- /dev/null
+++ b/models/comment.js
@@ -0,0 +1,26 @@
+'use strict';
+const {
+  Model
+} = require('sequelize');
+module.exports = (sequelize, DataTypes) => {
+  class Comment extends Model {
+    /**
+     * Helper method for defining associations.
+     * This method is not a part of Sequelize lifecycle.
+     * The `models/index` file will call this method automatically.
+     */
+    static associate(models) {
+      Comment.belongsTo(models.Restaurant)
+      Comment.belongsTo(models.User)
+    }
+  };
+  Comment.init({
+    text: DataTypes.STRING,
+    UserId: DataTypes.INTEGER,
+    RestaurantId: DataTypes.INTEGER
+  }, {
+    sequelize,
+    modelName: 'Comment',
+  });
+  return Comment;
+};
\ No newline at end of file
diff --git a/models/index.js b/models/index.js
index 66860356..a28ab951 100644
--- a/models/index.js
+++ b/models/index.js
@@ -13,22 +13,28 @@ let sequelize
 if (config.use_env_variable) {
   sequelize = new Sequelize(process.env[config.use_env_variable], config)
 } else {
-  sequelize = new Sequelize(config.database, config.username, config.password, config)
+  sequelize = new Sequelize(
+    config.database,
+    config.username,
+    config.password,
+    config
+  )
 }
 
 // 動態引入其他 models
-fs
-  .readdirSync(__dirname)
-  .filter(file => {
-    return (file.indexOf('.') !== 0) && (file !== basename) && (file.slice(-3) === '.js')
+fs.readdirSync(__dirname)
+  .filter((file) => {
+    return (
+      file.indexOf('.') !== 0 && file !== basename && file.slice(-3) === '.js'
+    )
   })
   .forEach(file => {
-    const model = sequelize['import'](path.join(__dirname, file))
+    const model = require(path.join(__dirname, file))(sequelize, Sequelize.DataTypes)
     db[model.name] = model
   })
 
 // 設定 Models 之間的關聯
-Object.keys(db).forEach(modelName => {
+Object.keys(db).forEach((modelName) => {
   if (db[modelName].associate) {
     db[modelName].associate(db)
   }
diff --git a/models/restaurant.js b/models/restaurant.js
new file mode 100644
index 00000000..6207ba9d
--- /dev/null
+++ b/models/restaurant.js
@@ -0,0 +1,31 @@
+'use strict';
+const {
+  Model
+} = require('sequelize');
+module.exports = (sequelize, DataTypes) => {
+  class Restaurant extends Model {
+    /**
+     * Helper method for defining associations.
+     * This method is not a part of Sequelize lifecycle.
+     * The `models/index` file will call this method automatically.
+     */
+    static associate(models) {
+      Restaurant.belongsTo(models.Category)
+      Restaurant.hasMany(models.Comment)
+    }
+  };
+  Restaurant.init({
+    name: DataTypes.STRING,
+    tel: DataTypes.STRING,
+    address: DataTypes.STRING,
+    opening_hours: DataTypes.STRING,
+    description: DataTypes.TEXT,
+    image: DataTypes.STRING,
+    CategoryId: DataTypes.INTEGER,
+    viewCounts: DataTypes.INTEGER
+  }, {
+    sequelize,
+    modelName: 'Restaurant',
+  });
+  return Restaurant;
+};
\ No newline at end of file
diff --git a/models/user.js b/models/user.js
new file mode 100644
index 00000000..58bae45e
--- /dev/null
+++ b/models/user.js
@@ -0,0 +1,27 @@
+'use strict';
+const {
+  Model
+} = require('sequelize');
+module.exports = (sequelize, DataTypes) => {
+  class User extends Model {
+    /**
+     * Helper method for defining associations.
+     * This method is not a part of Sequelize lifecycle.
+     * The `models/index` file will call this method automatically.
+     */
+    static associate(models) {
+      User.hasMany(models.Comment)
+    }
+  };
+  User.init({
+    name: DataTypes.STRING,
+    email: DataTypes.STRING,
+    password: DataTypes.STRING,
+    isAdmin: DataTypes.BOOLEAN,
+    image: DataTypes.STRING
+  }, {
+    sequelize,
+    modelName: 'User',
+  });
+  return User;
+};
\ No newline at end of file
diff --git a/package-lock.json b/package-lock.json
index 26dc7139..8b442d3e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -163,6 +163,11 @@
         "picomatch": "^2.0.4"
       }
     },
+    "append-field": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/append-field/-/append-field-1.0.0.tgz",
+      "integrity": "sha1-HjRA6RXwsSA9I3SOeO3XubW0PlY="
+    },
     "argparse": {
       "version": "1.0.10",
       "resolved": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz",
@@ -183,17 +188,31 @@
       "integrity": "sha512-jgsaNduz+ndvGyFt3uSuWqvy4lCnIJiovtouQN5JZHOKCS2QuhEdbcQHFhVksz2N2U9hXJo8odG7ETyWlEeuDw==",
       "dev": true
     },
+    "async": {
+      "version": "0.2.10",
+      "resolved": "https://registry.npmjs.org/async/-/async-0.2.10.tgz",
+      "integrity": "sha1-trvgsGdLnXGXCMo43owjfLUmw9E="
+    },
     "asynckit": {
       "version": "0.4.0",
       "resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
-      "integrity": "sha1-x57Zf380y48robyXkLzDZkdLS3k=",
-      "dev": true
+      "integrity": "sha1-x57Zf380y48robyXkLzDZkdLS3k="
+    },
+    "aws-sign": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/aws-sign/-/aws-sign-0.2.0.tgz",
+      "integrity": "sha1-xVAThWyBlOyFSgy+yQqrWgTOOsU="
     },
     "balanced-match": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz",
       "integrity": "sha1-ibTRmasr7kneFk6gK4nORi1xt2c="
     },
+    "bcryptjs": {
+      "version": "2.4.3",
+      "resolved": "https://registry.npmjs.org/bcryptjs/-/bcryptjs-2.4.3.tgz",
+      "integrity": "sha1-mrVie5PmBiH/fNrF2pczAn3x0Ms="
+    },
     "binary-extensions": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.1.0.tgz",
@@ -221,6 +240,14 @@
         "type-is": "~1.6.17"
       }
     },
+    "boom": {
+      "version": "0.3.8",
+      "resolved": "https://registry.npmjs.org/boom/-/boom-0.3.8.tgz",
+      "integrity": "sha1-yM2wQUNZEnQWKMBE7Mcy0dF8Ceo=",
+      "requires": {
+        "hoek": "0.7.x"
+      }
+    },
     "boxen": {
       "version": "5.1.2",
       "resolved": "https://registry.npmjs.org/boxen/-/boxen-5.1.2.tgz",
@@ -330,6 +357,43 @@
       "integrity": "sha512-qhAVI1+Av2X7qelOfAIYwXONood6XlZE/fXaBSmW/T5SzLAmCgzi+eiWE7fUvbHaeNBQH13UftjpXxsfLkMpgw==",
       "dev": true
     },
+    "buffer-from": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz",
+      "integrity": "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ=="
+    },
+    "buffer-writer": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/buffer-writer/-/buffer-writer-2.0.0.tgz",
+      "integrity": "sha512-a7ZpuTZU1TRtnwyCNW3I5dc0wWNC3VR9S++Ewyk2HHZdrO3CQJqSpd+95Us590V6AL7JqUAH2IwZ/398PmNFgw=="
+    },
+    "busboy": {
+      "version": "0.2.14",
+      "resolved": "https://registry.npmjs.org/busboy/-/busboy-0.2.14.tgz",
+      "integrity": "sha1-bCpiLvz0fFe7vh4qnDetNseSVFM=",
+      "requires": {
+        "dicer": "0.2.5",
+        "readable-stream": "1.1.x"
+      },
+      "dependencies": {
+        "readable-stream": {
+          "version": "1.1.14",
+          "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz",
+          "integrity": "sha1-fPTFTvZI44EwhMY23SB54WbAgdk=",
+          "requires": {
+            "core-util-is": "~1.0.0",
+            "inherits": "~2.0.1",
+            "isarray": "0.0.1",
+            "string_decoder": "~0.10.x"
+          }
+        },
+        "string_decoder": {
+          "version": "0.10.31",
+          "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz",
+          "integrity": "sha1-YuIDvEF2bGwoyfyEMB2rHFMQ+pQ="
+        }
+      }
+    },
     "bytes": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.0.tgz",
@@ -364,6 +428,15 @@
         }
       }
     },
+    "call-bind": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz",
+      "integrity": "sha512-7O+FbCihrB5WGbFYesctwmTKae6rOiIzmz1icreWJ+0aA7LJfuqhEso2T9ncpcFtzMQtzXf2QGGueWJGTYsqrA==",
+      "requires": {
+        "function-bind": "^1.1.1",
+        "get-intrinsic": "^1.0.2"
+      }
+    },
     "camelcase": {
       "version": "5.3.1",
       "resolved": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz",
@@ -494,7 +567,6 @@
       "version": "1.0.8",
       "resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz",
       "integrity": "sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==",
-      "dev": true,
       "requires": {
         "delayed-stream": "~1.0.0"
       }
@@ -507,14 +579,53 @@
     "component-emitter": {
       "version": "1.3.0",
       "resolved": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.3.0.tgz",
-      "integrity": "sha512-Rd3se6QB+sO1TwqZjscQrurpEPIfO0/yYnSin6Q/rD3mOutHvUrCAhJub3r90uNb+SESBuE0QYoB90YdfatsRg==",
-      "dev": true
+      "integrity": "sha512-Rd3se6QB+sO1TwqZjscQrurpEPIfO0/yYnSin6Q/rD3mOutHvUrCAhJub3r90uNb+SESBuE0QYoB90YdfatsRg=="
     },
     "concat-map": {
       "version": "0.0.1",
       "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
       "integrity": "sha1-2Klr13/Wjfd5OnMDajug1UBdR3s="
     },
+    "concat-stream": {
+      "version": "1.6.2",
+      "resolved": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.6.2.tgz",
+      "integrity": "sha512-27HBghJxjiZtIk3Ycvn/4kbJk/1uZuJFfuPEns6LaEvpvG1f0hTea8lilrouyo9mVc2GWdcEZ8OLoGmSADlrCw==",
+      "requires": {
+        "buffer-from": "^1.0.0",
+        "inherits": "^2.0.3",
+        "readable-stream": "^2.2.2",
+        "typedarray": "^0.0.6"
+      },
+      "dependencies": {
+        "isarray": {
+          "version": "1.0.0",
+          "resolved": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
+          "integrity": "sha1-u5NdSFgsuhaMBoNJV6VKPgcSTxE="
+        },
+        "readable-stream": {
+          "version": "2.3.7",
+          "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.7.tgz",
+          "integrity": "sha512-Ebho8K4jIbHAxnuxi7o42OrZgF/ZTNcsZj6nRKyUmkhLFq8CHItp/fy6hQZuZmP/n3yZ9VBUbp4zz/mX8hmYPw==",
+          "requires": {
+            "core-util-is": "~1.0.0",
+            "inherits": "~2.0.3",
+            "isarray": "~1.0.0",
+            "process-nextick-args": "~2.0.0",
+            "safe-buffer": "~5.1.1",
+            "string_decoder": "~1.1.1",
+            "util-deprecate": "~1.0.1"
+          }
+        },
+        "string_decoder": {
+          "version": "1.1.1",
+          "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
+          "integrity": "sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==",
+          "requires": {
+            "safe-buffer": "~5.1.0"
+          }
+        }
+      }
+    },
     "config-chain": {
       "version": "1.1.12",
       "resolved": "https://registry.npmjs.org/config-chain/-/config-chain-1.1.12.tgz",
@@ -537,6 +648,11 @@
         "xdg-basedir": "^4.0.0"
       }
     },
+    "connect-flash": {
+      "version": "0.1.1",
+      "resolved": "https://registry.npmjs.org/connect-flash/-/connect-flash-0.1.1.tgz",
+      "integrity": "sha1-2GMPJtlaf4UfmVax6MxnMvO2qjA="
+    },
     "content-disposition": {
       "version": "0.5.3",
       "resolved": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.3.tgz",
@@ -555,16 +671,33 @@
       "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.4.0.tgz",
       "integrity": "sha512-+Hp8fLp57wnUSt0tY0tHEXh4voZRDnoIrZPqlo3DPiI4y9lwg/jqx+1Om94/W6ZaPDOUbnjOt/99w66zk+l1Xg=="
     },
+    "cookie-jar": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/cookie-jar/-/cookie-jar-0.2.0.tgz",
+      "integrity": "sha1-ZOzAasl423leS1KQy+SLo3gUAPo="
+    },
     "cookie-signature": {
       "version": "1.0.6",
       "resolved": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz",
       "integrity": "sha1-4wOogrNCzD7oylE6eZmXNNqzriw="
     },
     "cookiejar": {
-      "version": "2.1.2",
-      "resolved": "https://registry.npmjs.org/cookiejar/-/cookiejar-2.1.2.tgz",
-      "integrity": "sha512-Mw+adcfzPxcPeI+0WlvRrr/3lGVO0bD75SxX6811cxSh1Wbxx7xZBGK1eVtDf6si8rg2lhnUjsVLMFMfbRIuwA==",
-      "dev": true
+      "version": "2.1.3",
+      "resolved": "https://registry.npmjs.org/cookiejar/-/cookiejar-2.1.3.tgz",
+      "integrity": "sha512-JxbCBUdrfr6AQjOXrxoTvAMJO4HBTUIlBzslcJPAz+/KT8yk53fXun51u+RenNYvad/+Vc2DIz5o9UxlCDymFQ=="
+    },
+    "core-util-is": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz",
+      "integrity": "sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ=="
+    },
+    "cryptiles": {
+      "version": "0.1.3",
+      "resolved": "https://registry.npmjs.org/cryptiles/-/cryptiles-0.1.3.tgz",
+      "integrity": "sha1-GlVnNPBtJLo0hirpy55wmjr7/xw=",
+      "requires": {
+        "boom": "0.3.x"
+      }
     },
     "crypto-random-string": {
       "version": "2.0.0",
@@ -623,8 +756,7 @@
     "delayed-stream": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz",
-      "integrity": "sha1-3zrhmayt+31ECqrgsp4icrJOxhk=",
-      "dev": true
+      "integrity": "sha1-3zrhmayt+31ECqrgsp4icrJOxhk="
     },
     "denque": {
       "version": "1.4.1",
@@ -641,6 +773,33 @@
       "resolved": "https://registry.npmjs.org/destroy/-/destroy-1.0.4.tgz",
       "integrity": "sha1-l4hXRCxEdJ5CBmE+N5RiBYJqvYA="
     },
+    "dicer": {
+      "version": "0.2.5",
+      "resolved": "https://registry.npmjs.org/dicer/-/dicer-0.2.5.tgz",
+      "integrity": "sha1-WZbAhrszIYyBLAkL3cCc0S+stw8=",
+      "requires": {
+        "readable-stream": "1.1.x",
+        "streamsearch": "0.1.2"
+      },
+      "dependencies": {
+        "readable-stream": {
+          "version": "1.1.14",
+          "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz",
+          "integrity": "sha1-fPTFTvZI44EwhMY23SB54WbAgdk=",
+          "requires": {
+            "core-util-is": "~1.0.0",
+            "inherits": "~2.0.1",
+            "isarray": "0.0.1",
+            "string_decoder": "~0.10.x"
+          }
+        },
+        "string_decoder": {
+          "version": "0.10.31",
+          "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz",
+          "integrity": "sha1-YuIDvEF2bGwoyfyEMB2rHFMQ+pQ="
+        }
+      }
+    },
     "diff": {
       "version": "4.0.2",
       "resolved": "https://registry.npmjs.org/diff/-/diff-4.0.2.tgz",
@@ -655,6 +814,11 @@
         "is-obj": "^2.0.0"
       }
     },
+    "dotenv": {
+      "version": "10.0.0",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-10.0.0.tgz",
+      "integrity": "sha512-rlBi9d8jpv9Sf1klPjNfFAuWDjKLwTIJJ/VxtoTwIR6hnZxcEOQCZg2oIL3MWBYw5GpUDKOEnND7LXTbIpQ03Q=="
+    },
     "dottie": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/dottie/-/dottie-2.0.2.tgz",
@@ -833,6 +997,68 @@
         "vary": "~1.1.2"
       }
     },
+    "express-handlebars": {
+      "version": "5.3.4",
+      "resolved": "https://registry.npmjs.org/express-handlebars/-/express-handlebars-5.3.4.tgz",
+      "integrity": "sha512-b36grfkbXZItLLQV6cwzA20o6Zg4Eckke3PjHF4EGQIQLGs5IPMjpAxepdGb45A/bECekXzA9STzNqvEgrdRPw==",
+      "requires": {
+        "glob": "^7.2.0",
+        "graceful-fs": "^4.2.7",
+        "handlebars": "^4.7.7"
+      },
+      "dependencies": {
+        "glob": {
+          "version": "7.2.0",
+          "resolved": "https://registry.npmjs.org/glob/-/glob-7.2.0.tgz",
+          "integrity": "sha512-lmLf6gtyrPq8tTjSmrO94wBeQbFR3HbLHbuyD69wuyQkImp2hWqMGB47OX65FBkPffO641IP9jWa1z4ivqG26Q==",
+          "requires": {
+            "fs.realpath": "^1.0.0",
+            "inflight": "^1.0.4",
+            "inherits": "2",
+            "minimatch": "^3.0.4",
+            "once": "^1.3.0",
+            "path-is-absolute": "^1.0.0"
+          }
+        },
+        "graceful-fs": {
+          "version": "4.2.8",
+          "resolved": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.8.tgz",
+          "integrity": "sha512-qkIilPUYcNhJpd33n0GBXTB1MMPp14TxEsEs0pTrsSVucApsYzW5V+Q8Qxhik6KU3evy+qkAAowTByymK0avdg=="
+        }
+      }
+    },
+    "express-session": {
+      "version": "1.17.2",
+      "resolved": "https://registry.npmjs.org/express-session/-/express-session-1.17.2.tgz",
+      "integrity": "sha512-mPcYcLA0lvh7D4Oqr5aNJFMtBMKPLl++OKKxkHzZ0U0oDq1rpKBnkR5f5vCHR26VeArlTOEF9td4x5IjICksRQ==",
+      "requires": {
+        "cookie": "0.4.1",
+        "cookie-signature": "1.0.6",
+        "debug": "2.6.9",
+        "depd": "~2.0.0",
+        "on-headers": "~1.0.2",
+        "parseurl": "~1.3.3",
+        "safe-buffer": "5.2.1",
+        "uid-safe": "~2.1.5"
+      },
+      "dependencies": {
+        "cookie": {
+          "version": "0.4.1",
+          "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.4.1.tgz",
+          "integrity": "sha512-ZwrFkGJxUR3EIoXtO+yVE69Eb7KlixbaeAWfBQB9vVsNn/o+Yw69gBWSSDK825hQNdN+wF8zELf3dFNl/kxkUA=="
+        },
+        "depd": {
+          "version": "2.0.0",
+          "resolved": "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz",
+          "integrity": "sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw=="
+        },
+        "safe-buffer": {
+          "version": "5.2.1",
+          "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
+          "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ=="
+        }
+      }
+    },
     "ext": {
       "version": "1.4.0",
       "resolved": "https://registry.npmjs.org/ext/-/ext-1.4.0.tgz",
@@ -848,11 +1074,15 @@
         }
       }
     },
+    "faker": {
+      "version": "5.5.3",
+      "resolved": "https://registry.npmjs.org/faker/-/faker-5.5.3.tgz",
+      "integrity": "sha512-wLTv2a28wjUyWkbnX7u/ABZBkUkIF2fCd73V6P2oFqEGEktDfzWx4UxrSqtPRw0xPRAcjeAOIiJWqZm3pP4u3g=="
+    },
     "fast-safe-stringify": {
-      "version": "2.0.7",
-      "resolved": "https://registry.npmjs.org/fast-safe-stringify/-/fast-safe-stringify-2.0.7.tgz",
-      "integrity": "sha512-Utm6CdzT+6xsDk2m8S6uL8VHxNwI6Jub+e9NYTcAms28T84pTa25GJQV9j0CY0N1rM8hK4x6grpF2BQf+2qwVA==",
-      "dev": true
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/fast-safe-stringify/-/fast-safe-stringify-2.1.1.tgz",
+      "integrity": "sha512-W+KJc2dmILlPplD/H4K9l9LcAHAfPtP6BY84uVLXQ6Evcz9Lcg33Y2z1IVblT6xdY54PXYVHEv+0Wpq8Io6zkA=="
     },
     "fill-keys": {
       "version": "1.0.2",
@@ -900,11 +1130,15 @@
       "integrity": "sha512-b6suED+5/3rTpUBdG1gupIl8MPFCAMA0QXwmljLhvCUKcUvdE4gWky9zpuGCcXHOsz4J9wPGNWq6OKpmIzz3hQ==",
       "dev": true
     },
+    "forever-agent": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.2.0.tgz",
+      "integrity": "sha1-4cJcetROCcOPIzh2x2/MJP+EOx8="
+    },
     "form-data": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/form-data/-/form-data-3.0.0.tgz",
-      "integrity": "sha512-CKMFDglpbMi6PyN+brwB9Q/GOw0eAnsrEZDgcsH5Krhz5Od/haKHAX0NmQfha2zPPz0JpWzA7GJHGSnvCRLWsg==",
-      "dev": true,
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/form-data/-/form-data-3.0.1.tgz",
+      "integrity": "sha512-RHkBKtLWUVwd7SqRIvCZMEvAMoGUp0XU+seQiZejj0COz3RI3hWP4sCv3gZWWLjJTd7rGwcsF5eKZGii0r/hbg==",
       "requires": {
         "asynckit": "^0.4.0",
         "combined-stream": "^1.0.8",
@@ -912,10 +1146,9 @@
       }
     },
     "formidable": {
-      "version": "1.2.2",
-      "resolved": "https://registry.npmjs.org/formidable/-/formidable-1.2.2.tgz",
-      "integrity": "sha512-V8gLm+41I/8kguQ4/o1D3RIHRmhYFG4pnNyonvua+40rqcEmT4+V71yaZ3B457xbbgCsCfjSPi65u/W6vK1U5Q==",
-      "dev": true
+      "version": "1.2.6",
+      "resolved": "https://registry.npmjs.org/formidable/-/formidable-1.2.6.tgz",
+      "integrity": "sha512-KcpbcpuLNOwrEjnbpMC0gS+X8ciDoZE1kkqzat4a8vrprf+s9pKNQ/QIwWfbfs4ltgmFl3MD177SNTkve3BwGQ=="
     },
     "forwarded": {
       "version": "0.1.2",
@@ -972,6 +1205,16 @@
       "integrity": "sha1-6td0q+5y4gQJQzoGY2YCPdaIekE=",
       "dev": true
     },
+    "get-intrinsic": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.1.1.tgz",
+      "integrity": "sha512-kWZrnVM42QCiEA2Ig1bG8zjoIMOgxWwYCEeNdwY6Tv/cOSeGpcoX4pXHfKUxNKVoArnrEr2e9srnAxxGIraS9Q==",
+      "requires": {
+        "function-bind": "^1.1.1",
+        "has": "^1.0.3",
+        "has-symbols": "^1.0.1"
+      }
+    },
     "get-stream": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/get-stream/-/get-stream-4.1.0.tgz",
@@ -1045,6 +1288,18 @@
       "integrity": "sha512-qBr4OuELkhPenW6goKVXiv47US3clb3/IbuWF9KNKEijAy9oeHxU9IgzjvJhHkUzhaj7rOUD7+YGWqUjLp5oSA==",
       "dev": true
     },
+    "handlebars": {
+      "version": "4.7.7",
+      "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.7.tgz",
+      "integrity": "sha512-aAcXm5OAfE/8IXkcZvCepKU3VzW1/39Fb5ZuqMtgI/hT8X2YgoMvBY5dLhq/cpOvw7Lk1nK/UF71aLG/ZnVYRA==",
+      "requires": {
+        "minimist": "^1.2.5",
+        "neo-async": "^2.6.0",
+        "source-map": "^0.6.1",
+        "uglify-js": "^3.1.4",
+        "wordwrap": "^1.0.0"
+      }
+    },
     "has": {
       "version": "1.0.3",
       "resolved": "https://registry.npmjs.org/has/-/has-1.0.3.tgz",
@@ -1058,17 +1313,38 @@
       "resolved": "https://registry.npmjs.org/has-flag/-/has-flag-4.0.0.tgz",
       "integrity": "sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ=="
     },
+    "has-symbols": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.2.tgz",
+      "integrity": "sha512-chXa79rL/UC2KlX17jo3vRGz0azaWEx5tGqZg5pO3NUyEJVB17dMruQlzCCOfUvElghKcm5194+BCRvi2Rv/Gw=="
+    },
     "has-yarn": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/has-yarn/-/has-yarn-2.1.0.tgz",
       "integrity": "sha512-UqBRqi4ju7T+TqGNdqAO0PaSVGsDGJUBQvk9eUWNGRY1CFGDzYhLWoM7JQEemnlvVcv/YEmc2wNW8BC24EnUsw=="
     },
+    "hawk": {
+      "version": "0.10.2",
+      "resolved": "https://registry.npmjs.org/hawk/-/hawk-0.10.2.tgz",
+      "integrity": "sha1-mzYd7pWpMWQObVBOBWCaj8OsRdI=",
+      "requires": {
+        "boom": "0.3.x",
+        "cryptiles": "0.1.x",
+        "hoek": "0.7.x",
+        "sntp": "0.1.x"
+      }
+    },
     "he": {
       "version": "1.2.0",
       "resolved": "https://registry.npmjs.org/he/-/he-1.2.0.tgz",
       "integrity": "sha512-F/1DnUGPopORZi0ni+CvrCgHQ5FyEAHRLSApuYWMmrbSwoN2Mn/7k+Gl38gJnR7yyDZk6WLXwiGod1JOWNDKGw==",
       "dev": true
     },
+    "hoek": {
+      "version": "0.7.6",
+      "resolved": "https://registry.npmjs.org/hoek/-/hoek-0.7.6.tgz",
+      "integrity": "sha1-YPvZBFV1Qc0rh5Wr8wihs3cOFVo="
+    },
     "http-cache-semantics": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/http-cache-semantics/-/http-cache-semantics-4.1.0.tgz",
@@ -1099,6 +1375,14 @@
       "resolved": "https://registry.npmjs.org/ignore-by-default/-/ignore-by-default-1.0.1.tgz",
       "integrity": "sha1-SMptcvbGo68Aqa1K5odr44ieKwk="
     },
+    "imgur-node-api": {
+      "version": "0.1.0",
+      "resolved": "https://registry.npmjs.org/imgur-node-api/-/imgur-node-api-0.1.0.tgz",
+      "integrity": "sha1-iJU25/x9/FyYXHtVeMGuwxyzwYY=",
+      "requires": {
+        "request": "~2.16.6"
+      }
+    },
     "import-lazy": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/import-lazy/-/import-lazy-2.1.0.tgz",
@@ -1244,8 +1528,7 @@
     "isarray": {
       "version": "0.0.1",
       "resolved": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz",
-      "integrity": "sha1-ihis/Kmo9Bd+Cav8YDiTmwXR7t8=",
-      "dev": true
+      "integrity": "sha1-ihis/Kmo9Bd+Cav8YDiTmwXR7t8="
     },
     "isexe": {
       "version": "2.0.0",
@@ -1280,6 +1563,11 @@
       "resolved": "https://registry.npmjs.org/json-buffer/-/json-buffer-3.0.0.tgz",
       "integrity": "sha1-Wx85evx11ne96Lz8Dkfh+aPZqJg="
     },
+    "json-stringify-safe": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-3.0.0.tgz",
+      "integrity": "sha1-nbew5TDH8onF6MhDKvGRwv91pbM="
+    },
     "jsonfile": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/jsonfile/-/jsonfile-4.0.0.tgz",
@@ -1405,6 +1693,27 @@
       "resolved": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz",
       "integrity": "sha1-sAqqVW3YtEVoFQ7J0blT8/kMu2E="
     },
+    "method-override": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/method-override/-/method-override-3.0.0.tgz",
+      "integrity": "sha512-IJ2NNN/mSl9w3kzWB92rcdHpz+HjkxhDJWNDBqSlas+zQdP8wBiJzITPg08M/k2uVvMow7Sk41atndNtt/PHSA==",
+      "requires": {
+        "debug": "3.1.0",
+        "methods": "~1.1.2",
+        "parseurl": "~1.3.2",
+        "vary": "~1.1.2"
+      },
+      "dependencies": {
+        "debug": {
+          "version": "3.1.0",
+          "resolved": "https://registry.npmjs.org/debug/-/debug-3.1.0.tgz",
+          "integrity": "sha512-OX8XqP7/1a9cqkxYw2yXss15f26NKWBpDXQd0/uK/KPqdQhxbPa994hnzjcE2VqQpDslf55723cKPUOGSmMY3g==",
+          "requires": {
+            "ms": "2.0.0"
+          }
+        }
+      }
+    },
     "methods": {
       "version": "1.1.2",
       "resolved": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz",
@@ -1568,6 +1877,31 @@
       "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
       "integrity": "sha1-VgiurfwAvmwpAd9fmGF4jeDVl8g="
     },
+    "multer": {
+      "version": "1.4.3",
+      "resolved": "https://registry.npmjs.org/multer/-/multer-1.4.3.tgz",
+      "integrity": "sha512-np0YLKncuZoTzufbkM6wEKp68EhWJXcU6fq6QqrSwkckd2LlMgd1UqhUJLj6NS/5sZ8dE8LYDWslsltJznnXlg==",
+      "requires": {
+        "append-field": "^1.0.0",
+        "busboy": "^0.2.11",
+        "concat-stream": "^1.5.2",
+        "mkdirp": "^0.5.4",
+        "object-assign": "^4.1.1",
+        "on-finished": "^2.3.0",
+        "type-is": "^1.6.4",
+        "xtend": "^4.0.0"
+      },
+      "dependencies": {
+        "mkdirp": {
+          "version": "0.5.5",
+          "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.5.tgz",
+          "integrity": "sha512-NKmAlESf6jMGym1++R0Ra7wvhV+wFW63FaSOFPwRahvea0gMUcGUhVeAg/0BC0wiv9ih5NYPB1Wn1UEI1/L+xQ==",
+          "requires": {
+            "minimist": "^1.2.5"
+          }
+        }
+      }
+    },
     "mysql2": {
       "version": "2.2.5",
       "resolved": "https://registry.npmjs.org/mysql2/-/mysql2-2.2.5.tgz",
@@ -1628,6 +1962,11 @@
       "resolved": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.2.tgz",
       "integrity": "sha512-hZXc7K2e+PgeI1eDBe/10Ard4ekbfrrqG8Ep+8Jmf4JID2bNg7NvCPOZN+kfF574pFQI7mum2AUqDidoKqcTOw=="
     },
+    "neo-async": {
+      "version": "2.6.2",
+      "resolved": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz",
+      "integrity": "sha512-Yd3UES5mWCSqR+qNT93S3UoYUkqAZ9lLg8a7g9rimsWmYGK8cVToA4/sF3RrshdyV3sAGMXVUmpMYOw+dLpOuw=="
+    },
     "next-tick": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/next-tick/-/next-tick-1.0.0.tgz",
@@ -1725,6 +2064,21 @@
       "resolved": "https://registry.npmjs.org/normalize-url/-/normalize-url-4.5.1.tgz",
       "integrity": "sha512-9UZCFRHQdNrfTpGg8+1INIg93B6zE0aXMVFkw1WFwvO4SlZywU6aLg5Of0Ap/PgcbSw4LNxvMWXMeugwMCX0AA=="
     },
+    "oauth-sign": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.2.0.tgz",
+      "integrity": "sha1-oOahcV2u0GLzIrYit/5a/RA1tuI="
+    },
+    "object-assign": {
+      "version": "4.1.1",
+      "resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
+      "integrity": "sha1-IQmtx5ZYh8/AXLvUQsrIv7s2CGM="
+    },
+    "object-inspect": {
+      "version": "1.11.0",
+      "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.11.0.tgz",
+      "integrity": "sha512-jp7ikS6Sd3GxQfZJPyH3cjcbJF6GZPClgdV+EFygjFLQ5FmW/dRUnTd9PQ9k0JhoNDabWFbpF1yCdSWCC6gexg=="
+    },
     "on-finished": {
       "version": "2.3.0",
       "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz",
@@ -1733,6 +2087,11 @@
         "ee-first": "1.1.1"
       }
     },
+    "on-headers": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/on-headers/-/on-headers-1.0.2.tgz",
+      "integrity": "sha512-pZAE+FJLoyITytdqK0U5s+FIpjN0JP3OzFi/u8Rx+EV5/W+JTWGXG8xFzevE7AjBfDqHv/8vL8qQsIhHnqRkrA=="
+    },
     "once": {
       "version": "1.4.0",
       "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
@@ -1785,11 +2144,38 @@
         }
       }
     },
+    "packet-reader": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/packet-reader/-/packet-reader-1.0.0.tgz",
+      "integrity": "sha512-HAKu/fG3HpHFO0AA8WE8q2g+gBJaZ9MG7fcKk+IJPLTGAD6Psw4443l+9DGRbOIh3/aXr7Phy0TjilYivJo5XQ=="
+    },
     "parseurl": {
       "version": "1.3.3",
       "resolved": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz",
       "integrity": "sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ=="
     },
+    "passport": {
+      "version": "0.5.0",
+      "resolved": "https://registry.npmjs.org/passport/-/passport-0.5.0.tgz",
+      "integrity": "sha512-ln+ue5YaNDS+fes6O5PCzXKSseY5u8MYhX9H5Co4s+HfYI5oqvnHKoOORLYDUPh+8tHvrxugF2GFcUA1Q1Gqfg==",
+      "requires": {
+        "passport-strategy": "1.x.x",
+        "pause": "0.0.1"
+      }
+    },
+    "passport-local": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/passport-local/-/passport-local-1.0.0.tgz",
+      "integrity": "sha1-H+YyaMkudWBmJkN+O5BmYsFbpu4=",
+      "requires": {
+        "passport-strategy": "1.x.x"
+      }
+    },
+    "passport-strategy": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/passport-strategy/-/passport-strategy-1.0.0.tgz",
+      "integrity": "sha1-tVOaqPwiWj0a0XlHbd8ja0QPUuQ="
+    },
     "path-exists": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/path-exists/-/path-exists-3.0.0.tgz",
@@ -1816,16 +2202,103 @@
       "integrity": "sha1-uULm1L3mUwBe9rcTYd74cn0GReA=",
       "dev": true
     },
+    "pause": {
+      "version": "0.0.1",
+      "resolved": "https://registry.npmjs.org/pause/-/pause-0.0.1.tgz",
+      "integrity": "sha1-HUCLP9t2kjuVQ9lvtMnf1TXZy10="
+    },
+    "pg": {
+      "version": "8.7.1",
+      "resolved": "https://registry.npmjs.org/pg/-/pg-8.7.1.tgz",
+      "integrity": "sha512-7bdYcv7V6U3KAtWjpQJJBww0UEsWuh4yQ/EjNf2HeO/NnvKjpvhEIe/A/TleP6wtmSKnUnghs5A9jUoK6iDdkA==",
+      "requires": {
+        "buffer-writer": "2.0.0",
+        "packet-reader": "1.0.0",
+        "pg-connection-string": "^2.5.0",
+        "pg-pool": "^3.4.1",
+        "pg-protocol": "^1.5.0",
+        "pg-types": "^2.1.0",
+        "pgpass": "1.x"
+      }
+    },
+    "pg-connection-string": {
+      "version": "2.5.0",
+      "resolved": "https://registry.npmjs.org/pg-connection-string/-/pg-connection-string-2.5.0.tgz",
+      "integrity": "sha512-r5o/V/ORTA6TmUnyWZR9nCj1klXCO2CEKNRlVuJptZe85QuhFayC7WeMic7ndayT5IRIR0S0xFxFi2ousartlQ=="
+    },
+    "pg-int8": {
+      "version": "1.0.1",
+      "resolved": "https://registry.npmjs.org/pg-int8/-/pg-int8-1.0.1.tgz",
+      "integrity": "sha512-WCtabS6t3c8SkpDBUlb1kjOs7l66xsGdKpIPZsg4wR+B3+u9UAum2odSsF9tnvxg80h4ZxLWMy4pRjOsFIqQpw=="
+    },
+    "pg-pool": {
+      "version": "3.4.1",
+      "resolved": "https://registry.npmjs.org/pg-pool/-/pg-pool-3.4.1.tgz",
+      "integrity": "sha512-TVHxR/gf3MeJRvchgNHxsYsTCHQ+4wm3VIHSS19z8NC0+gioEhq1okDY1sm/TYbfoP6JLFx01s0ShvZ3puP/iQ=="
+    },
+    "pg-protocol": {
+      "version": "1.5.0",
+      "resolved": "https://registry.npmjs.org/pg-protocol/-/pg-protocol-1.5.0.tgz",
+      "integrity": "sha512-muRttij7H8TqRNu/DxrAJQITO4Ac7RmX3Klyr/9mJEOBeIpgnF8f9jAfRz5d3XwQZl5qBjF9gLsUtMPJE0vezQ=="
+    },
+    "pg-types": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/pg-types/-/pg-types-2.2.0.tgz",
+      "integrity": "sha512-qTAAlrEsl8s4OiEQY69wDvcMIdQN6wdz5ojQiOy6YRMuynxenON0O5oCpJI6lshc6scgAY8qvJ2On/p+CXY0GA==",
+      "requires": {
+        "pg-int8": "1.0.1",
+        "postgres-array": "~2.0.0",
+        "postgres-bytea": "~1.0.0",
+        "postgres-date": "~1.0.4",
+        "postgres-interval": "^1.1.0"
+      }
+    },
+    "pgpass": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/pgpass/-/pgpass-1.0.4.tgz",
+      "integrity": "sha512-YmuA56alyBq7M59vxVBfPJrGSozru8QAdoNlWuW3cz8l+UX3cWge0vTvjKhsSHSJpo3Bom8/Mm6hf0TR5GY0+w==",
+      "requires": {
+        "split2": "^3.1.1"
+      }
+    },
     "picomatch": {
       "version": "2.2.2",
       "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-2.2.2.tgz",
       "integrity": "sha512-q0M/9eZHzmr0AulXyPwNfZjtwZ/RBZlbN3K3CErVrk50T2ASYI7Bye0EvekFY3IP1Nt2DHu0re+V2ZHIpMkuWg=="
     },
+    "postgres-array": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/postgres-array/-/postgres-array-2.0.0.tgz",
+      "integrity": "sha512-VpZrUqU5A69eQyW2c5CA1jtLecCsN2U/bD6VilrFDWq5+5UIEVO7nazS3TEcHf1zuPYO/sqGvUvW62g86RXZuA=="
+    },
+    "postgres-bytea": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/postgres-bytea/-/postgres-bytea-1.0.0.tgz",
+      "integrity": "sha1-AntTPAqokOJtFy1Hz5zOzFIazTU="
+    },
+    "postgres-date": {
+      "version": "1.0.7",
+      "resolved": "https://registry.npmjs.org/postgres-date/-/postgres-date-1.0.7.tgz",
+      "integrity": "sha512-suDmjLVQg78nMK2UZ454hAG+OAW+HQPZ6n++TNDUX+L0+uUlLywnoxJKDou51Zm+zTCjrCl0Nq6J9C5hP9vK/Q=="
+    },
+    "postgres-interval": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/postgres-interval/-/postgres-interval-1.2.0.tgz",
+      "integrity": "sha512-9ZhXKM/rw350N1ovuWHbGxnGh/SNJ4cnxHiM0rxE4VN41wsg8P8zWn9hv/buK00RP4WvlOyr/RBDiptyxVbkZQ==",
+      "requires": {
+        "xtend": "^4.0.0"
+      }
+    },
     "prepend-http": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/prepend-http/-/prepend-http-2.0.0.tgz",
       "integrity": "sha1-6SQ0v6XqjBn0HN/UAddBo8gZ2Jc="
     },
+    "process-nextick-args": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz",
+      "integrity": "sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag=="
+    },
     "proto-list": {
       "version": "1.2.4",
       "resolved": "https://registry.npmjs.org/proto-list/-/proto-list-1.2.4.tgz",
@@ -1883,6 +2356,11 @@
       "resolved": "https://registry.npmjs.org/qs/-/qs-6.7.0.tgz",
       "integrity": "sha512-VCdBRNFTX1fyE7Nb6FYoURo/SPe62QCaAyzJvUjwRaIsc+NePBEniHlvxFmmX56+HZphIGtV0XeCirBtpDrTyQ=="
     },
+    "random-bytes": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/random-bytes/-/random-bytes-1.0.0.tgz",
+      "integrity": "sha1-T2ih3Arli9P7lYSMMDJNt11kNgs="
+    },
     "randombytes": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz",
@@ -1930,7 +2408,6 @@
       "version": "3.6.0",
       "resolved": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.0.tgz",
       "integrity": "sha512-BViHy7LKeTz4oNnkcLJ+lVSL6vpiFeX6/d3oSH8zCW7UxP2onchk+vTGB143xuFjHS3deTgkKoXXymXqymiIdA==",
-      "dev": true,
       "requires": {
         "inherits": "^2.0.3",
         "string_decoder": "^1.1.1",
@@ -1961,6 +2438,64 @@
         "rc": "^1.2.8"
       }
     },
+    "request": {
+      "version": "2.16.6",
+      "resolved": "https://registry.npmjs.org/request/-/request-2.16.6.tgz",
+      "integrity": "sha1-hy/kRa5y3iZrN4edatfclI+gHK0=",
+      "requires": {
+        "aws-sign": "~0.2.0",
+        "cookie-jar": "~0.2.0",
+        "forever-agent": "~0.2.0",
+        "form-data": "~0.0.3",
+        "hawk": "~0.10.2",
+        "json-stringify-safe": "~3.0.0",
+        "mime": "~1.2.7",
+        "node-uuid": "~1.4.0",
+        "oauth-sign": "~0.2.0",
+        "qs": "~0.5.4",
+        "tunnel-agent": "~0.2.0"
+      },
+      "dependencies": {
+        "combined-stream": {
+          "version": "0.0.7",
+          "resolved": "https://registry.npmjs.org/combined-stream/-/combined-stream-0.0.7.tgz",
+          "integrity": "sha1-ATfmV7qlp1QcV6w3rF/AfXO03B8=",
+          "requires": {
+            "delayed-stream": "0.0.5"
+          }
+        },
+        "delayed-stream": {
+          "version": "0.0.5",
+          "resolved": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-0.0.5.tgz",
+          "integrity": "sha1-1LH0OpPoKW3+AmlPRoC8N6MTxz8="
+        },
+        "form-data": {
+          "version": "0.0.10",
+          "resolved": "https://registry.npmjs.org/form-data/-/form-data-0.0.10.tgz",
+          "integrity": "sha1-2zRaU3jYau6x7V1VO4aawZLS9e0=",
+          "requires": {
+            "async": "~0.2.7",
+            "combined-stream": "~0.0.4",
+            "mime": "~1.2.2"
+          }
+        },
+        "mime": {
+          "version": "1.2.11",
+          "resolved": "https://registry.npmjs.org/mime/-/mime-1.2.11.tgz",
+          "integrity": "sha1-WCA+7Ybjpe8XrtK32evUfwpg3RA="
+        },
+        "node-uuid": {
+          "version": "1.4.8",
+          "resolved": "https://registry.npmjs.org/node-uuid/-/node-uuid-1.4.8.tgz",
+          "integrity": "sha1-sEDrCSOWivq/jTL7HxfxFn/auQc="
+        },
+        "qs": {
+          "version": "0.5.6",
+          "resolved": "https://registry.npmjs.org/qs/-/qs-0.5.6.tgz",
+          "integrity": "sha1-MbGtBYVnZRxSaSFQa5qHk5EaA4Q="
+        }
+      }
+    },
     "require-directory": {
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
@@ -2153,6 +2688,16 @@
       "resolved": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.1.1.tgz",
       "integrity": "sha512-JvdAWfbXeIGaZ9cILp38HntZSFSo3mWg6xGcJJsd+d4aRMOqauag1C63dJfDw7OaMYwEbHMOxEZ1lqVRYP2OAw=="
     },
+    "side-channel": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/side-channel/-/side-channel-1.0.4.tgz",
+      "integrity": "sha512-q5XPytqFEIKHkGdiMIrY10mvLRvnQh42/+GoBlFW3b2LXLE2xxJpZFdm94we0BaoV3RwJyGqg5wS7epxTv0Zvw==",
+      "requires": {
+        "call-bind": "^1.0.0",
+        "get-intrinsic": "^1.0.2",
+        "object-inspect": "^1.9.0"
+      }
+    },
     "sigmund": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz",
@@ -2178,6 +2723,27 @@
         "supports-color": "^7.1.0"
       }
     },
+    "sntp": {
+      "version": "0.1.4",
+      "resolved": "https://registry.npmjs.org/sntp/-/sntp-0.1.4.tgz",
+      "integrity": "sha1-XvSBuVGnspr/30r9fyaDj8ESD4Q=",
+      "requires": {
+        "hoek": "0.7.x"
+      }
+    },
+    "source-map": {
+      "version": "0.6.1",
+      "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz",
+      "integrity": "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g=="
+    },
+    "split2": {
+      "version": "3.2.2",
+      "resolved": "https://registry.npmjs.org/split2/-/split2-3.2.2.tgz",
+      "integrity": "sha512-9NThjpgZnifTkJpzTZ7Eue85S49QwpNhZTq6GRJwObb6jnLFNGB7Qm73V5HewTROPyxD0C29xqmaI68bQtV+hg==",
+      "requires": {
+        "readable-stream": "^3.0.0"
+      }
+    },
     "sprintf-js": {
       "version": "1.0.3",
       "resolved": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz",
@@ -2194,6 +2760,11 @@
       "resolved": "https://registry.npmjs.org/statuses/-/statuses-1.5.0.tgz",
       "integrity": "sha1-Fhx9rBd2Wf2YEfQ3cfqZOBR4Yow="
     },
+    "streamsearch": {
+      "version": "0.1.2",
+      "resolved": "https://registry.npmjs.org/streamsearch/-/streamsearch-0.1.2.tgz",
+      "integrity": "sha1-gIudDlb8Jz2Am6VzOOkpkZoanxo="
+    },
     "string-width": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/string-width/-/string-width-3.1.0.tgz",
@@ -2208,7 +2779,6 @@
       "version": "1.3.0",
       "resolved": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz",
       "integrity": "sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==",
-      "dev": true,
       "requires": {
         "safe-buffer": "~5.2.0"
       },
@@ -2216,8 +2786,7 @@
         "safe-buffer": {
           "version": "5.2.1",
           "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
-          "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==",
-          "dev": true
+          "integrity": "sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ=="
         }
       }
     },
@@ -2246,7 +2815,6 @@
       "version": "6.1.0",
       "resolved": "https://registry.npmjs.org/superagent/-/superagent-6.1.0.tgz",
       "integrity": "sha512-OUDHEssirmplo3F+1HWKUrUjvnQuA+nZI6i/JJBdXb5eq9IyEQwPyPpqND+SSsxf6TygpBEkUjISVRN4/VOpeg==",
-      "dev": true,
       "requires": {
         "component-emitter": "^1.3.0",
         "cookiejar": "^2.1.2",
@@ -2262,31 +2830,30 @@
       },
       "dependencies": {
         "debug": {
-          "version": "4.2.0",
-          "resolved": "https://registry.npmjs.org/debug/-/debug-4.2.0.tgz",
-          "integrity": "sha512-IX2ncY78vDTjZMFUdmsvIRFY2Cf4FnD0wRs+nQwJU8Lu99/tPFdb0VybiiMTPe3I6rQmwsqQqRBvxU+bZ/I8sg==",
-          "dev": true,
+          "version": "4.3.2",
+          "resolved": "https://registry.npmjs.org/debug/-/debug-4.3.2.tgz",
+          "integrity": "sha512-mOp8wKcvj7XxC78zLgw/ZA+6TSgkoE2C/ienthhRD298T7UNwAg9diBpLRxC0mOezLl4B0xV7M0cCO6P/O0Xhw==",
           "requires": {
             "ms": "2.1.2"
           }
         },
         "mime": {
-          "version": "2.4.6",
-          "resolved": "https://registry.npmjs.org/mime/-/mime-2.4.6.tgz",
-          "integrity": "sha512-RZKhC3EmpBchfTGBVb8fb+RL2cWyw/32lshnsETttkBAyAUXSGHxbEJWWRXc751DrIxG1q04b8QwMbAwkRPpUA==",
-          "dev": true
+          "version": "2.6.0",
+          "resolved": "https://registry.npmjs.org/mime/-/mime-2.6.0.tgz",
+          "integrity": "sha512-USPkMeET31rOMiarsBNIHZKLGgvKc/LrjofAnBlOttf5ajRvqiRA8QsenbcooctK6d6Ts6aqZXBA+XbkKthiQg=="
         },
         "ms": {
           "version": "2.1.2",
           "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz",
-          "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w==",
-          "dev": true
+          "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="
         },
         "qs": {
-          "version": "6.9.4",
-          "resolved": "https://registry.npmjs.org/qs/-/qs-6.9.4.tgz",
-          "integrity": "sha512-A1kFqHekCTM7cz0udomYUoYNWjBebHm/5wzU/XqrBRBNWectVH0QIiN+NEcZ0Dte5hvzHwbr8+XQmguPhJ6WdQ==",
-          "dev": true
+          "version": "6.10.1",
+          "resolved": "https://registry.npmjs.org/qs/-/qs-6.10.1.tgz",
+          "integrity": "sha512-M528Hph6wsSVOBiYUnGf+K/7w0hNshs/duGsNXPUCLH5XAqjEtiPGwNONLV0tBH8NoGb0mvD5JubnUTrujKDTg==",
+          "requires": {
+            "side-channel": "^1.0.4"
+          }
         }
       }
     },
@@ -2358,6 +2925,11 @@
         }
       }
     },
+    "tunnel-agent": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.2.0.tgz",
+      "integrity": "sha1-aFPCr7GyEJ5FYp5JK9419Fnqaeg="
+    },
     "type": {
       "version": "1.2.0",
       "resolved": "https://registry.npmjs.org/type/-/type-1.2.0.tgz",
@@ -2383,6 +2955,11 @@
         "mime-types": "~2.1.24"
       }
     },
+    "typedarray": {
+      "version": "0.0.6",
+      "resolved": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz",
+      "integrity": "sha1-hnrHTjhkGHsdPUfZlqeOxciDB3c="
+    },
     "typedarray-to-buffer": {
       "version": "3.1.5",
       "resolved": "https://registry.npmjs.org/typedarray-to-buffer/-/typedarray-to-buffer-3.1.5.tgz",
@@ -2391,6 +2968,20 @@
         "is-typedarray": "^1.0.0"
       }
     },
+    "uglify-js": {
+      "version": "3.14.3",
+      "resolved": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.14.3.tgz",
+      "integrity": "sha512-mic3aOdiq01DuSVx0TseaEzMIVqebMZ0Z3vaeDhFEh9bsc24hV1TFvN74reA2vs08D0ZWfNjAcJ3UbVLaBss+g==",
+      "optional": true
+    },
+    "uid-safe": {
+      "version": "2.1.5",
+      "resolved": "https://registry.npmjs.org/uid-safe/-/uid-safe-2.1.5.tgz",
+      "integrity": "sha512-KPHm4VL5dDXKz01UuEd88Df+KzynaohSL9fBh096KWAxSKZQDI2uBrVqtvRM4rwrIrRRKsdLNML/lnaaVSRioA==",
+      "requires": {
+        "random-bytes": "~1.0.0"
+      }
+    },
     "umzug": {
       "version": "2.3.0",
       "resolved": "https://registry.npmjs.org/umzug/-/umzug-2.3.0.tgz",
@@ -2464,8 +3055,7 @@
     "util-deprecate": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
-      "integrity": "sha1-RQ1Nyfpw3nMnYvvS1KKJgUGaDM8=",
-      "dev": true
+      "integrity": "sha1-RQ1Nyfpw3nMnYvvS1KKJgUGaDM8="
     },
     "utils-merge": {
       "version": "1.0.1",
@@ -2588,6 +3178,11 @@
         "@types/node": "*"
       }
     },
+    "wordwrap": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz",
+      "integrity": "sha1-J1hIEIkUVqQXHI0CJkQa3pDLyus="
+    },
     "workerpool": {
       "version": "6.0.2",
       "resolved": "https://registry.npmjs.org/workerpool/-/workerpool-6.0.2.tgz",
@@ -2625,6 +3220,11 @@
       "resolved": "https://registry.npmjs.org/xdg-basedir/-/xdg-basedir-4.0.0.tgz",
       "integrity": "sha512-PSNhEJDejZYV7h50BohL09Er9VaIefr2LMAf3OEmpCkjOi34eYyQYAXUTjEQtZJTKcF0E2UKTh+osDLsgNim9Q=="
     },
+    "xtend": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz",
+      "integrity": "sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ=="
+    },
     "y18n": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/y18n/-/y18n-4.0.0.tgz",
@@ -2688,4 +3288,4 @@
       }
     }
   }
-}
+}
\ No newline at end of file
diff --git a/package.json b/package.json
index ec0db71d..a6c625bb 100644
--- a/package.json
+++ b/package.json
@@ -12,11 +12,26 @@
     "url": "git+https://github.com/ALPHACamp/forum-express-grading.git"
   },
   "dependencies": {
+    "bcryptjs": "^2.4.3",
+    "body-parser": "^1.19.0",
+    "connect-flash": "^0.1.1",
+    "dotenv": "^10.0.0",
     "express": "^4.17.1",
+    "express-handlebars": "^5.3.4",
+    "express-session": "^1.17.2",
+    "faker": "^5.5.3",
+    "imgur-node-api": "^0.1.0",
+    "method-override": "^3.0.0",
+    "moment": "^2.29.1",
+    "multer": "^1.4.3",
     "mysql2": "^2.2.5",
     "nodemon": "^2.0.12",
+    "passport": "^0.5.0",
+    "passport-local": "^1.0.0",
+    "pg": "^8.7.1",
     "sequelize": "^6.3.5",
-    "sequelize-cli": "^6.2.0"
+    "sequelize-cli": "^6.2.0",
+    "superagent": "^6.1.0"
   },
   "devDependencies": {
     "chai": "^4.2.0",
@@ -26,4 +41,4 @@
     "sinon": "^9.2.0",
     "supertest": "^5.0.0"
   }
-}
+}
\ No newline at end of file
diff --git a/routes/index.js b/routes/index.js
index fc55e842..20d090d8 100644
--- a/routes/index.js
+++ b/routes/index.js
@@ -1,6 +1,69 @@
-module.exports = (app) => {
+const helpers = require('../_helpers')
+
+const restController = require('../controllers/restController')
+const adminController = require('../controllers/adminController')
+const userController = require('../controllers/userController')
+const categoryController = require('../controllers/categoryController')
+const commentController = require('../controllers/commentController.js')
+
+const multer = require('multer')
+const upload = multer({ dest: 'temp/' })
+
+module.exports = (app, passport) => {
+  const authenticated = (req, res, next) => {
+    if (helpers.ensureAuthenticated(req)) {
+      return next()
+    }
+    res.redirect('/signin')
+  }
+  const authenticatedAdmin = (req, res, next) => {
+    if (helpers.ensureAuthenticated(req)) {
+      if (helpers.getUser(req).isAdmin) { return next() }
+      return res.redirect('/')
+    }
+    res.redirect('/signin')
+  }
+  app.get('/', authenticated, (req, res) => res.redirect('/restaurants'))
+  app.get('/restaurants', authenticated, restController.getRestaurants)
+
+  app.get('/restaurants/feeds', authenticated, restController.getFeeds)
+  app.get('/restaurants/:id', authenticated, restController.getRestaurant)
+  app.get('/restaurants/:id/dashboard', authenticated, restController.getDashBoard)
+
+  app.post('/comments', authenticated, commentController.postComment)
+  app.delete('/comments/:id', authenticatedAdmin, commentController.deleteComment)
+
+  app.get('/users/:id', authenticated, userController.getUser)
+  app.get('/users/:id/edit', authenticated, userController.editUser)
+  app.put('/users/:id', authenticated, upload.single('image'), userController.putUser)
+
+  app.get('/admin', authenticatedAdmin, (req, res) => res.redirect('/admin/restaurants'))
+
+  app.get('/admin/restaurants', authenticatedAdmin,  adminController.getRestaurants)
+  app.get('/admin/restaurants/create', authenticatedAdmin, adminController.createRestaurant)
+  app.post('/admin/restaurants', authenticatedAdmin, upload.single('image'), adminController.postRestaurant)
+
+  app.get('/admin/restaurants/:id', authenticatedAdmin, adminController.getRestaurant)
+  app.get('/admin/restaurants/:id/edit', authenticatedAdmin, adminController.editRestaurant)
+  app.put('/admin/restaurants/:id', authenticatedAdmin, upload.single('image'), adminController.putRestaurant)
+  app.delete('/admin/restaurants/:id', authenticatedAdmin, adminController.deleteRestaurant)
+
+  app.get('/admin/users', authenticatedAdmin, adminController.getUsers)
+  app.put('/admin/users/:id/toggleAdmin', authenticatedAdmin, adminController.toggleAdmin)
+
+  app.get('/admin/categories', authenticatedAdmin, categoryController.getCategories)
+  app.post('/admin/categories', authenticatedAdmin, categoryController.postCategory)
+
+  app.get('/admin/categories/:id', authenticatedAdmin, categoryController.getCategories)
+  app.put('/admin/categories/:id', authenticatedAdmin, categoryController.putCategory)
+  app.delete('/admin/categories/:id', authenticatedAdmin, categoryController.deleteCategory)
+
+  app.get('/signup', userController.signUpPage)
+  app.post('/signup', userController.signUp)
+
+  app.get('/signin', userController.signInPage)
+  app.post('/signin', passport.authenticate('local', { failureRedirect: '/signin', failureFlash: true }), userController.signIn)
+  app.get('/logout', userController.logout)
+
 
-  app.get('/', (req, res) => {
-    res.send('Hello World!')
-  })
 }
diff --git a/seeders/20211113040111-users-seed-file.js b/seeders/20211113040111-users-seed-file.js
new file mode 100644
index 00000000..7ec5db5d
--- /dev/null
+++ b/seeders/20211113040111-users-seed-file.js
@@ -0,0 +1,29 @@
+'use strict';
+const bcrypt = require('bcryptjs')
+module.exports = {
+  up: async (queryInterface, Sequelize) => {
+    await queryInterface.bulkInsert('Users', [{
+      id: 1,
+      email: 'root@example.com',
+      password: bcrypt.hashSync('12345678', bcrypt.genSaltSync(10), null),
+      isAdmin: true,
+      name: 'admin',
+      image: `https://loremflickr.com/320/240/selfie,boy,girl/?random=${Math.random() * 50}`,
+      createdAt: new Date(),
+      updatedAt: new Date()
+    }, {
+      id: 2,
+      email: 'user1@example.com',
+      password: bcrypt.hashSync('12345678', bcrypt.genSaltSync(10), null),
+      isAdmin: false,
+      name: 'user1',
+      image: `https://loremflickr.com/320/240/selfie,boy,girl/?random=${Math.random() * 50}`,
+      createdAt: new Date(),
+      updatedAt: new Date()
+    }], {})
+  },
+
+  down: async (queryInterface, Sequelize) => {
+    await queryInterface.bulkDelete('Users', null, {})
+  }
+};
diff --git a/seeders/20211115135419-categories-seed-file.js b/seeders/20211115135419-categories-seed-file.js
new file mode 100644
index 00000000..28a74be1
--- /dev/null
+++ b/seeders/20211115135419-categories-seed-file.js
@@ -0,0 +1,19 @@
+'use strict';
+
+module.exports = {
+  up: async (queryInterface, Sequelize) => {
+    await queryInterface.bulkInsert('Categories', [
+      '中式料理', '日本料理', '義大利料理', '墨西哥料理', '素食料理', '美式料理', '複合式料理'
+    ].map((item, index) => ({
+      id: index + 1,
+      name: item,
+      createdAt: new Date(),
+      updatedAt: new Date()
+    })
+    ),{})
+  },
+
+  down: async (queryInterface, Sequelize) => {
+    await queryInterface.bulkDelete('Categories', null, {})
+  }
+};
diff --git a/seeders/20211115141956-restaurants-seed-file.js b/seeders/20211115141956-restaurants-seed-file.js
new file mode 100644
index 00000000..9932200a
--- /dev/null
+++ b/seeders/20211115141956-restaurants-seed-file.js
@@ -0,0 +1,26 @@
+'use strict';
+const faker = require('faker')
+module.exports = {
+  up: async (queryInterface, Sequelize) => {
+    await queryInterface.bulkInsert('Restaurants',
+      Array.from({ length: 50 }).map((d, i) =>
+      ({
+        id: i + 1,
+        name: faker.name.findName(),
+        tel: faker.phone.phoneNumber(),
+        address: faker.address.streetAddress(),
+        opening_hours: '08:00',
+        image: `https://loremflickr.com/320/240/restaurant,food/?random=${Math.random() * 100}`,
+        description: faker.lorem.text(),
+        createdAt: new Date(),
+        updatedAt: new Date(),
+        CategoryId: Math.floor(Math.random() * 6) + 1,
+        viewCounts: 0
+      })
+      ), {})
+  },
+
+  down: async (queryInterface, Sequelize) => {
+    await queryInterface.bulkDelete('Restaurants', null, {})
+  }
+};
\ No newline at end of file
diff --git a/seeders/20211121052218-comments-seed-file.js b/seeders/20211121052218-comments-seed-file.js
new file mode 100644
index 00000000..ae4d8e4e
--- /dev/null
+++ b/seeders/20211121052218-comments-seed-file.js
@@ -0,0 +1,22 @@
+'use strict';
+const faker = require('faker')
+
+module.exports = {
+  up: async (queryInterface, Sequelize) => {
+    await queryInterface.bulkInsert('Comments',
+      Array.from({ length: 20 }).map((d, i) =>
+      ({
+        id: i + 1,
+        text: faker.lorem.sentence(),
+        UserId: Math.floor(Math.random() * 2)  + 1,
+        RestaurantId: Math.floor(Math.random() * 50) + 1,
+        createdAt: new Date(),
+        updatedAt: new Date()
+      })
+      ), {})
+  },
+
+  down: async (queryInterface, Sequelize) => {
+    await queryInterface.bulkDelete('Comments', null, {})
+  }
+};
diff --git a/tests/R01.test.js b/tests/R01.test.js
new file mode 100644
index 00000000..2765ccfb
--- /dev/null
+++ b/tests/R01.test.js
@@ -0,0 +1,152 @@
+const chai = require('chai')
+const request = require('supertest')
+const should = chai.should()
+
+const app = require('../app')
+const { createModelMock, createControllerProxy, mockRequest, mockResponse } = require('../helpers/unitTestHelpers');
+
+describe('# R01', () => {
+  describe('登入測試: POST /signin', function(){
+    // 以下測試會發出請求，測試資料庫內是否有作業指定的使用者資料
+    // 測試資料的來源是真實的資料庫
+    it('#1 密碼錯誤', function(done){
+      request(app)
+        // 對 POST /signin 發出請求，參數是錯誤的密碼
+        .post('/signin')
+        .type('urlencoded')
+        .send('email=root@example.com&password=123')
+        // 期待登入驗證回應失敗，重新導向 /signin
+        .expect('Location', '/signin')
+        .expect(302, done)
+    })
+
+    it('#2 帳號錯誤', function(done){
+      request(app)
+        // 對 POST /signin 發出請求，參數是錯誤的帳號
+        .post('/signin')
+        .type('urlencoded')
+        .send('email=tu&password=12345678')
+        // 期待登入驗證回應失敗，重新導向 /signin
+        .expect('Location', '/signin')
+        .expect(302, done)
+    })
+
+    it('#3 成功登入', function(done){
+      request(app)
+        // 對 POST /signin 發出請求，參數是作業指定的使用者帳號密碼
+        .post('/signin')
+        .type('urlencoded')
+        .send('email=root@example.com&password=12345678')
+        // 期待登入驗證成功，重新導向 /restaurants 
+        .expect('Location', '/restaurants')
+        .expect(302, done)
+    })
+  });
+
+  describe('# R01: 使用者權限管理', function () {
+    // 前置準備
+    before(() => {
+      // 製作假資料
+      // 本 context 會用這筆資料進行測試
+      this.UserMock = createModelMock('User', {
+        id: 1,
+        email: 'root@example.com',
+        name: 'admin',
+        isAdmin: false,
+      })
+
+      // 修改 adminController 中的資料庫連線設定，由連向真實的資料庫 -> 改為連向模擬的 User table
+      this.adminController = createControllerProxy('../controllers/adminController', { User: this.UserMock })
+    })
+    
+    // 開始測試
+    context('# [顯示使用者清單]', () => {
+      it(' GET /admin/users ', async () => {
+        // 模擬 request & response
+        const req = mockRequest() // 對 GET /admin/users 發出請求
+        const res = mockResponse()
+
+        // 測試作業指定的 adminController.getUsers 函式
+        await this.adminController.getUsers(req, res)
+
+        // getUser 執行完畢後，應呼叫 res.render
+        // res.render 的第 2 個參數應是 users
+        // 根據測試資料，users 中的第 1 筆資料，name 屬性值應該要是 'admin'
+        res.render.getCall(0).args[1].users[0].name.should.equal('admin')
+      })
+    })
+
+    context('# [修改使用者權限] for admin', () => {
+      before(() => {
+      // 製作假資料
+      // 本 context 會用這筆資料進行測試
+        this.UserMock = createModelMock(
+          'User', 
+          {
+            id: 1,
+            email: 'root@example.com',
+            name: 'admin',
+            isAdmin: true, // 是管理者
+          }
+        )
+        
+        // 將 adminController 中的 User db 取代成 User mock db
+        this.adminController = createControllerProxy('../controllers/adminController', { User: this.UserMock })
+      })
+
+      it(' PUT /admin/users/:id/toggleAdmin ', async () => {
+        // 模擬 request & response
+        const req = mockRequest({ params: { id: 1 } }) // 帶入 params.id = 1，對 PUT /admin/users/1/toggleAdmin 發出請求
+        const res = mockResponse()
+
+       // 測試作業指定的 adminController.toggleAdmin 函式
+        await this.adminController.toggleAdmin(req, res)
+
+        // toggleAdmin 正確執行的話，應呼叫 req.flash
+        // req.flash 的參數應該要與下列字串一致
+        req.flash.calledWith('error_messages','禁止變更管理者權限').should.be.true
+
+        // toggleAdmin 執行完畢後，應呼叫 res.redirect 並重新導向上一頁 
+        res.redirect.calledWith('back').should.be.true
+      })
+    })
+
+    context('# [修改使用者權限] for user', () => {
+      before(() => {
+        // 製作假資料
+        // 本 context 會用這筆資料進行測試
+        this.UserMock = createModelMock(
+          'User',
+          {
+            id: 1,
+            email: 'user@example.com',
+            name: 'user',
+            isAdmin: false, // 非管理者
+          }
+        )
+        // 將 adminController 中的 User db 取代成 User mock db
+        this.adminController = createControllerProxy('../controllers/adminController', { User: this.UserMock })
+      })
+
+      it(' PUT /admin/users/:id/toggleAdmin ', async () => {
+        // 模擬 request & response
+        const req = mockRequest({ params: { id: 1 } }) // 帶入 params.id = 1，對 PUT /admin/users/1/toggleAdmin 發出請求
+        const res = mockResponse()
+
+        // 測試作業指定的 adminController.toggleAdmin 函式
+        await this.adminController.toggleAdmin(req, res)
+
+        // toggleAdmin 正確執行的話，應呼叫 req.flash 
+        // req.flash 的參數應與下列字串一致
+        req.flash.calledWith('success_messages','使用者權限變更成功').should.be.true
+        // toggleAdmin 執行完畢後，應呼叫 res.redirect 並重新導向 /admin/users
+        res.redirect.calledWith('/admin/users').should.be.true
+
+        // toggleAmin 執行完畢後，假資料中 id:1 使用者的應該要是 isAdmin：true
+        // 將假資料撈出，比對確認有成功修改到
+        const user = await this.UserMock.findOne({ where: { id: 1 } })
+        user.isAdmin.should.equal(true)
+      })
+    })
+  })
+})
diff --git a/tests/R02.test.js b/tests/R02.test.js
new file mode 100644
index 00000000..26c927b3
--- /dev/null
+++ b/tests/R02.test.js
@@ -0,0 +1,154 @@
+const chai = require('chai')
+const request = require('supertest')
+const sinon = require('sinon')
+const should = chai.should()
+
+const helpers = require('../_helpers');
+
+const { createModelMock, createControllerProxy, mockRequest, mockResponse } = require('../helpers/unitTestHelpers');
+
+describe('# R02', () => {
+  describe('# R02: 建立 User Profile', function () {
+    context('# [瀏覽 Profile]', () => {
+      // 前置準備
+      before(() => {
+        // 模擬登入驗證
+        this.ensureAuthenticated = sinon
+          .stub(helpers, 'ensureAuthenticated')
+          .returns(true)
+        this.getUser = sinon.stub(helpers, 'getUser').returns({ id: 1 })
+       // 製作假資料
+       // 本 context 會用這筆資料進行測試
+        this.UserMock = createModelMock('User', {
+          id: 1,
+          email: 'root@example.com',
+          name: 'admin',
+          isAdmin: false,
+        })
+
+        // 修改 userController 中的資料庫連線設定，由連向真實的資料庫 -> 改為連向模擬的 User table
+        this.userController = createControllerProxy('../controllers/userController', { User: this.UserMock })
+      })
+
+      // 開始測試
+      it(' GET /users/:id ', async () => {
+        // 模擬 request & response
+        const req = mockRequest({ params: { id: 1 } }) // 帶入 params.id = 1，對 GET /users/1 發出請求
+        const res = mockResponse()
+
+        // 測試作業指定的 userController.getUser 函式
+        await this.userController.getUser(req, res)
+
+        // toggleAdmin 執行完畢後，應呼叫 res.render
+        // res.render 的第 1 個參數要是 'profile' 
+        // res.render 的第 2 個參數要是 user，其 name 屬性的值應是 'admin'
+        res.render.getCall(0).args[0].should.equal('profile')
+        res.render.getCall(0).args[1].user.name.should.equal('admin')
+      })
+      
+      // 測試完畢，清除資料
+      after(async () => {
+        // 清除模擬驗證資料
+        this.ensureAuthenticated.restore()
+        this.getUser.restore()
+      })
+    })
+
+    context('# [瀏覽編輯 Profile 頁面]', () => {
+      before(() => {
+        // 模擬登入驗證
+        this.ensureAuthenticated = sinon
+          .stub(helpers, 'ensureAuthenticated')
+          .returns(true)
+        this.getUser = sinon.stub(helpers, 'getUser').returns({ id: 1 })
+
+        // 製作假資料
+        // 本 context 會用這筆資料進行測試
+        this.UserMock = createModelMock('User', {
+          id: 1,
+          email: 'root@example.com',
+          name: 'admin',
+          isAdmin: false,
+        })
+
+        // 連向模擬的 User table
+        this.userController = createControllerProxy('../controllers/userController', { User: this.UserMock })
+      })
+
+      it(' GET /users/:id/edit ', async () => {
+        // 模擬 request & response
+        const req = mockRequest({ params: { id: 1 } }) // 帶入 params.id = 1，對 GET /users/1/edit 發出請求
+        const res = mockResponse()
+
+        // 測試作業指定的 adminController.editUser 函式
+        await this.userController.editUser(req, res)
+
+        // editUser 執行完畢後，應呼叫 res.render
+        // res.render 的第 1 個參數要是 'edit' 
+        // res.render 的第 2 個參數要是 user，其 name 屬性的值應是 'admin'
+        res.render.getCall(0).args[0].should.equal('edit')
+        res.render.getCall(0).args[1].user.name.should.equal('admin')
+      })
+
+      after(async () => {
+        // 清除模擬驗證資料
+        this.ensureAuthenticated.restore()
+        this.getUser.restore()
+      })
+    })
+
+    context('# [編輯 Profile]', () => {
+      before(async () => {
+        // 模擬登入驗證
+        this.ensureAuthenticated = sinon
+          .stub(helpers, 'ensureAuthenticated')
+          .returns(true)
+        this.getUser = sinon.stub(helpers, 'getUser').returns({ id: 1 })
+        // 製作假資料
+        // 本 context 會用這筆資料進行測試
+        this.UserMock = createModelMock(
+          'User',
+          {
+            id: 1,
+            email: 'root@example.com',
+            name: 'admin',
+            isAdmin: false,
+          }
+        )
+
+        // 連向模擬的 User table
+        this.userController = createControllerProxy('../controllers/userController', { User: this.UserMock })
+      })
+
+      it(' PUT /users/:id ', async () => {
+        // 模擬 request & response 
+        // 對 PUT /users/1 發出 request，並夾帶 body.name = amdin2, body.email = admin_test@gmail.com
+        const req = mockRequest({
+          params: { id: 1 },
+          body: { name: 'admin2', email: 'admin_test@gmail.com' },
+        }) 
+        const res = mockResponse()
+
+        // 測試作業指定的 userController.putUser 函式
+        await this.userController.putUser(req, res)
+
+        // putUser 正確執行的話，應呼叫 req.flash 
+        // req.flash 的參數應與下列字串一致
+        req.flash.calledWith('success_messages','使用者資料編輯成功').should.be.true
+        // putUser 執行完畢後，應呼叫 res.redirect 並重新導向 /users/1
+        res.redirect.calledWith('/users/1').should.be.true
+        // putUser 執行完畢後，id:1 使用者的 name 和 email 應該已被修改 
+        // 將假資料撈出，比對確認有成功修改到
+        const user = await this.UserMock.findOne({ where: { id: 1 } })
+        user.name.should.equal('admin2')
+        user.email.should.equal('admin_test@gmail.com')
+      })
+
+      after(async () => {
+        // 清除模擬驗證資料
+        this.ensureAuthenticated.restore()
+        this.getUser.restore()
+      })
+    })
+  })
+})
diff --git a/tests/R03.test.js b/tests/R03.test.js
new file mode 100644
index 00000000..f415be50
--- /dev/null
+++ b/tests/R03.test.js
@@ -0,0 +1,59 @@
+const chai = require('chai')
+const request = require('supertest')
+const sinon = require('sinon')
+const should = chai.should()
+
+const helpers = require('../_helpers')
+const { createModelMock, createControllerProxy, mockRequest, mockResponse } = require('../helpers/unitTestHelpers');
+
+describe('# R03: 餐廳資訊整理：Dashboard', function () {
+  context('# [Q1: Dashboard - 1 - controller / view / route]', () => {
+    before(async () => {
+      // 製作假資料
+      // 本 context 會用這筆資料進行測試
+      this.UserMock = createModelMock('User', {
+        id: 1,
+        email: 'root@example.com',
+        name: 'admin',
+        isAdmin: false,
+      })
+      this.RestaurantMock = createModelMock('Restaurant', {
+        id: 1,
+        name: '銷魂麵',
+        viewCounts: 3
+      })
+      this.CategoryMock = createModelMock('Category', {
+        id: 1,
+        name: '食物'
+      })
+      this.CommentMock = createModelMock('Comment', {
+        id: 1,
+        text: "gogogo"
+      })
+
+      // 連向模擬的 tables
+      this.restController = createControllerProxy('../controllers/restController', { 
+        User: this.UserMock, 
+        Category: this.CategoryMock, 
+        Restaurant: this.RestaurantMock,
+        Comment: this.CommentMock,
+      })
+    })
+
+    it(' GET /restaurants/:id/dashboard ', async () => {
+      // 模擬 request & response
+      const req = mockRequest({ params: { id: 1 } }) // 帶入 params.id = 1，對 GET /restaurants/1/dashboard 發出請求
+      const res = mockResponse()
+      // 測試 restController.getDashBoard 函式
+      await this.restController.getDashBoard(req, res)
+
+      // getDashBoard 執行完畢後，應呼叫 res.render
+      // res.render 的第 1 個參數要是 'dashboard'
+      // res.render 的第 2 個參數要包含 restaurant，其 name 屬性的值應是 '銷魂麵'
+      // res.render 的地 3 個參數要包含 restaurant，其 viewCounts 值應該是 3
+      res.render.getCall(0).args[0].should.equal('dashboard')
+      res.render.getCall(0).args[1].restaurant.name.should.equal('銷魂麵')
+      res.render.getCall(0).args[1].restaurant.viewCounts.should.equal(3)
+    })
+  })
+})
diff --git a/tests/index.js b/tests/index.js
index b1d92960..57535e46 100644
--- a/tests/index.js
+++ b/tests/index.js
@@ -2,17 +2,14 @@ const request = require('supertest')
 
 const app = require('../app')
 
-describe('# 測試環境初始化', function() {
-    
+describe('# 測試環境初始化', function () {
   context('# First Test Case', () => {
-
-    it(" GET /admin/users ", (done) => {
-        request(app)
-          .get('/')
-          .end(function(err, res) {
-            done()
-        });
-    });
-
+    it(' GET /admin/users ', (done) => {
+      request(app)
+        .get('/')
+        .end(function (err, res) {
+          done()
+        })
+    })
   })
-})
\ No newline at end of file
+})
diff --git a/views/admin/categories.handlebars b/views/admin/categories.handlebars
new file mode 100644
index 00000000..6e8dabdc
--- /dev/null
+++ b/views/admin/categories.handlebars
@@ -0,0 +1,50 @@
+<h1>餐廳後台</h1>
+<a href='/admin/restaurants'>Restaurants</a> |
+<a href='/admin/categories'>Categories</a>
+<br />
+<br />
+<div class="d-flex align-items-center p-3 my-3 text-white-50 bg-purple rounded shadow-sm">
+  {{#if category}}
+  <form action="/admin/categories/{{category.id}}?_method=PUT" method="POST">
+    <input type="text" placeholder="name" name="name" value="{{category.name}}">
+    <button type="submit">Update</button>
+    <a href="/admin/categories">or Create New</a>
+  </form>
+  {{else}}
+  <form action="/admin/categories" method="POST">
+    <input type="text" placeholder="name" name="name">
+    <button type="submit">Submit</button>
+  </form>
+  {{/if}}
+</div>
+<br />
+<br />
+<table class="table">
+  <thead class="thead-dark">
+    <tr>
+      <th scope="col">#</th>
+      <th scope="col">Category Name</th>
+      <th scope="col">#</th>
+    </tr>
+  </thead>
+  <tbody>
+    {{#each categories}}
+    <tr>
+      <th scope="row">{{this.id}}</th>
+      <td>{{this.name}}</td>
+      <td>
+        <button type="button" class="btn btn-link">
+          <a href="/admin/categories/{{this.id}}">
+            Edit
+          </a>
+        </button>
+        <form action="/admin/categories/{{this.id}}?_method=DELETE" method="POST" style="display: inline;">
+          <button type="submit" class="btn btn-link">Delete</button>
+        </form>
+      </td>
+    </tr>
+    {{/each}}
+  </tbody>
+</table>
+<br />
+<br />
\ No newline at end of file
diff --git a/views/admin/create.handlebars b/views/admin/create.handlebars
new file mode 100644
index 00000000..bdebbfe4
--- /dev/null
+++ b/views/admin/create.handlebars
@@ -0,0 +1,53 @@
+ {{#if restaurant}}
+<form action="/admin/restaurants/{{restaurant.id}}?_method=PUT" method="POST" enctype="multipart/form-data">
+  {{else}}
+  <form action="/admin/restaurants" method="POST" enctype="multipart/form-data">
+    {{/if}}
+    <div class="form-group">
+      <label for="name">Name</label>
+      <input type="text" class="form-control" name="name" id="name" placeholder="Enter name"
+        value="{{restaurant.name}}">
+    </div>
+
+    <div class="form-group">
+      <label for="categoryId">Category</label>
+      <select type="text" class="form-control" name="categoryId" id="categoryId">
+        {{#each categories}}
+        <option value="{{this.id}}" {{#ifCond this.id ../restaurant.CategoryId}}
+         selected 
+         {{/ifCond}}>
+        {{this.name}}
+        </option>
+        {{/each}}
+      </select>
+    </div>
+
+    <div class="form-group">
+      <label for="tel">Tel</label>
+      <input type="text" class="form-control" name="tel" id="tel" placeholder="Enter tel" value="{{restaurant.tel}}">
+    </div>
+
+    <div class="form-group">
+      <label for="address">Address</label>
+      <input type="text" class="form-control" name="address" id="address" placeholder="Enter address"
+        value="{{restaurant.address}}">
+    </div>
+
+    <div class="form-group">
+      <label for="opening_hours">Opening Hours</label>
+      <input type="time" class="form-control" name="opening_hours" id="opening_hours" placeholder="Enter opening_hours"
+        value="{{restaurant.opening_hours}}">
+    </div>
+
+    <div class="form-group">
+      <label for="description">Description</label>
+      <textarea class="form-control" id="description" name="description" rows="3">{{restaurant.description}}</textarea>
+    </div>
+
+    <div class="form-group">
+      <label for="image">Image</label>
+      <input type="file" class="form-control-file" id="image" name="image">
+    </div>
+
+    <button type="submit" class="btn btn-primary">Submit</button>
+  </form>
\ No newline at end of file
diff --git a/views/admin/restaurant.handlebars b/views/admin/restaurant.handlebars
new file mode 100644
index 00000000..5f3186c1
--- /dev/null
+++ b/views/admin/restaurant.handlebars
@@ -0,0 +1,28 @@
+<div class="row">
+  <div class="col-md-12">
+    <h1>{{restaurant.name}}</h1>
+    <p>[{{restaurant.Category.name}}]</p>
+  </div>
+
+  <div class="col-md-4">
+    <img class="img-responsive center-block" src="{{restaurant.image}}" style="width: 250px;margin-bottom: 25px;">
+    <br>
+    <div class="well">
+      <ul class="list-unstyled">
+        <li><strong>Opening Hour:</strong> {{restaurant.opening_hours}}</li>
+        <li><strong>Tel:</strong> {{restaurant.tel}}</li>
+        <li><strong>Address:</strong> {{restaurant.address}}</li>
+      </ul>
+    </div>
+  </div>
+  <div class="col-md-8">
+    <p>{{restaurant.description}}</p>
+  </div>
+  <hr>
+</div>
+
+<hr>
+
+<br />
+<br />
+<a href="javascript:history.back()">回上一頁</a>
\ No newline at end of file
diff --git a/views/admin/restaurants.handlebars b/views/admin/restaurants.handlebars
new file mode 100644
index 00000000..3d24823a
--- /dev/null
+++ b/views/admin/restaurants.handlebars
@@ -0,0 +1,53 @@
+<h1>餐廳後台</h1>
+
+<a href='/admin/restaurants'>Restaurants</a> |
+<a href='/admin/categories'>Categories</a>
+<br/>
+<br/>
+
+<a href='/admin/restaurants/create'>
+  <button type="button" class="btn btn-primary">New Restaurant</button>
+</a>
+
+<a href='/admin/users'>
+  <button type="button" class="btn btn-primary">Users</button>
+</a>
+
+
+<br />
+<br />
+
+<table class="table">
+  <thead class="thead-dark">
+    <tr>
+      <th scope="col">#</th>
+      <th scope="col">Name</th>
+      <th scope="col">Category</th>
+      <th scope="col">#</th>
+    </tr>
+  </thead>
+  <tbody>
+    {{#each restaurants}}
+    <tr>
+      <th scope="row">{{this.id}}</th>
+      <td>{{this.name}}</td>
+      <td>{{this.Category.name}}</td>
+      <td>
+        <button type="button" class="btn btn-link">
+          <a href="/admin/restaurants/{{this.id}}">
+            Show
+          </a>
+        </button>
+        <button type="button" class="btn btn-link">
+          <a href="/admin/restaurants/{{this.id}}/edit">
+            Edit
+          </a>
+        </button>
+        <form action="/admin/restaurants/{{this.id}}?_method=DELETE" method="POST" style="display: inline;">
+          <button type="submit" class="btn btn-link">Delete</button>
+        </form>
+      </td>
+    </tr>
+    {{/each}}
+  </tbody>
+</table>
\ No newline at end of file
diff --git a/views/admin/users.handlebars b/views/admin/users.handlebars
new file mode 100644
index 00000000..41d29e07
--- /dev/null
+++ b/views/admin/users.handlebars
@@ -0,0 +1,48 @@
+<h1>餐廳後台</h1>
+
+<a href='/admin/restaurants'>
+  <button type="button" class="btn btn-primary">Restaurants</button>
+</a>
+
+<a href='/admin/users'>
+  <button type="button" class="btn btn-primary">Users</button>
+</a>
+
+
+<br />
+<br />
+
+<table class="table">
+  <thead class="thead-dark">
+    <tr>
+      <th scope="col">#</th>
+      <th scope="col">Name</th>
+      <th scope="col">Email</th>
+      <th scope="col">Role</th>
+      <th scope="col">#</th>
+    </tr>
+  </thead>
+  <tbody>
+    {{#each users}}
+    <tr>
+      <th scope="row">{{this.id}}</th>
+      <td>{{this.name}}</td>
+      <td>{{this.email}}</td>
+      <td>
+        {{#if this.isAdmin}}
+        admin
+        {{else}}
+        user
+        {{/if}}
+      </td>
+      <td>
+        <form action="/admin/users/{{this.id}}/toggleAdmin?_method=PUT" method="post">
+        <button type="submit" class="btn btn-link">
+          set as{{#if this.isAdmin}} user{{else}} admin{{/if}}
+        </button>
+        </form>
+      </td>
+    </tr>
+    {{/each}}
+  </tbody>
+</table>
\ No newline at end of file
diff --git a/views/dashboard.handlebars b/views/dashboard.handlebars
new file mode 100644
index 00000000..aa3ff44b
--- /dev/null
+++ b/views/dashboard.handlebars
@@ -0,0 +1,18 @@
+<div class="card-body">
+  <h5 class="card-title">{{restaurant.name}}</h5>
+  <p class="card-text">[{{restaurant.Category.name}}]</p>
+
+  <hr>
+
+  <ul>
+    <li>評論數：{{counts}}</li>
+    <li>瀏覽次數：{{restaurant.viewCounts}}</li>
+    <li>收藏數：</li>
+  </ul>
+
+</div>
+
+<br/>
+<br/>
+
+<a href="javascript:history.back()">回上一頁</a>
diff --git a/views/edit.handlebars b/views/edit.handlebars
new file mode 100644
index 00000000..cedcfdcd
--- /dev/null
+++ b/views/edit.handlebars
@@ -0,0 +1,14 @@
+<form action="/users/{{user.id}}?_method=PUT" method="POST" enctype="multipart/form-data">
+  
+  <div class="form-group">
+    <label for="name">Name</label>
+    <input type="text" class="form-control" name="name" id="name" placeholder="Enter name" value="{{user.name}}">
+  </div>
+
+  <div class="form-group">
+    <label for="image">Image</label>
+    <input type="file" class="form-control-file" id="image" name="image">
+  </div>
+
+  <button type="submit" class="btn btn-primary">Submit</button>
+</form>
\ No newline at end of file
diff --git a/views/feeds.handlebars b/views/feeds.handlebars
new file mode 100644
index 00000000..b3decb32
--- /dev/null
+++ b/views/feeds.handlebars
@@ -0,0 +1,66 @@
+<ul class="nav nav-tabs">
+  <li class="nav-item">
+    <a class="nav-link" href="/restaurants">首頁</a>
+  </li>
+  <li class="nav-item">
+    <a class="nav-link active" href="/restaurants/feeds">最新動態</a>
+  </li>
+</ul>
+<br /><br />
+<h1>最新動態</h1>
+<hr>
+<div class="row">
+  <div class="col-md-6">
+    <div class="card">
+      <div class="card-header">
+        最新餐廳
+      </div>
+      <div class="card-body">
+        {{#each restaurants}}
+        <div>
+          <h4>
+            <a href="/restaurants/{{this.id}}">{{this.name}}</a>
+            <small>{{this.Category.name}}</small>
+          </h4>
+          <p>{{this.description}}</p>
+          {{moment this.createdAt}}
+          <hr>
+        </div>
+        {{/each}}
+      </div>
+    </div>
+  </div>
+  <div class="col-md-6">
+    <div class="card">
+      <div class="card-header">
+        最新評論
+      </div>
+      <div class="card-body">
+        {{#each comments}}
+        <div>
+          <h4>
+            <a href="/restaurants/{{this.Restaurant.id}}">{{this.Restaurant.name}}</a>
+          </h4>
+          <p>{{this.text}}</p>
+          by <a href="/users/{{this.User.id}}">{{this.User.name}}</a>
+          at {{moment this.createdAt}}
+          <hr>
+        </div>
+        {{/each}}
+      </div>
+    </div>
+  </div>
+</div>
+views/feeds.handlebars
+
+最上面的導覽列運用的是 Bootstrap 的 Nav Tabs 元件，別忘了在首頁的最開頭加上這個元件，選到哪一頁，哪一個 Tab 就需要加入 active：
+
+<ul class="nav nav-tabs">
+  <li class="nav-item">
+    <a class="nav-link active" href="#">首頁</a>
+  </li>
+  <li class="nav-item">
+    <a class="nav-link" href="/restaurants/feeds">最新動態</a>
+  </li>
+</ul>
+<br />
\ No newline at end of file
diff --git a/views/layouts/main.handlebars b/views/layouts/main.handlebars
new file mode 100644
index 00000000..1d82a417
--- /dev/null
+++ b/views/layouts/main.handlebars
@@ -0,0 +1,59 @@
+<!DOCTYPE html>
+<html>
+
+<head>
+  <meta charset="utf-8">
+  <meta http-equiv="X-UA-Compatible" content="IE=edge">
+  <title>餐廳評論網</title>
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css"
+    integrity="sha384-MCw98/SFnGE8fJT3GXwEOngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO" crossorigin="anonymous">
+</head>
+
+<body>
+  {{!-- Navbar --}}
+  <nav class="navbar navbar-expand-lg fixed-top navbar-dark bg-dark">
+    <a class="navbar-brand" href="/">餐廳評論網</a>
+    <div class="navbar-collapse offcanvas-collapse" id="navbarsExampleDefault">
+      <ul class="navbar-nav mr-auto">
+      </ul>
+      <div>
+        {{#if user.isAdmin}}
+        <a href="/admin" style="color: white;margin-right: 10px;">Admin 後台</a>
+        {{/if}}
+        {{#if user}}
+        <span style="color: white;margin-right: 10px;">Hi, {{user.email}}</span>
+        <a href="/users/{{user.id}}" style="color: white;margin-right: 10px;">Profile</a>
+        <a href="/logout"><button class="btn btn-outline-success my-2 my-sm-0">LogOut</button></a>
+        {{/if}}
+      </div>
+    </div>
+  </nav>
+  <br />
+  <main role="main">
+    <div class="album py-5 bg-light">
+      <div class="container">
+        {{#if success_messages}}
+        <div class="alert alert-success" role="alert" style="margin: 30px 0 ;">
+          {{success_messages}}
+        </div>
+        {{/if}}
+        {{#if error_messages}}
+        <div class="alert alert-danger" role="alert" style="margin: 30px 0 ;">
+          {{error_messages}}
+        </div>
+        {{/if}}
+        
+        {{{body}}}
+      </div>
+    </div>
+  </main>
+</body>
+<script src="https://code.jquery.com/jquery-3.3.1.slim.min.js"
+  integrity="sha384-q8i/X+965DzO0rT7abK41JStQIAqVgRVzpbzo5smXKp4YfRvH+8abtTE1Pi6jizo" crossorigin="anonymous"></script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.3/umd/popper.min.js"
+  integrity="sha384-ZMP7rVo3mIykV+2+9J3UJ46jBk0WLaUAdn689aCwoqbBJiSnjAK/l8WvCWPIPm49" crossorigin="anonymous"></script>
+<script src="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js"
+  integrity="sha384-ChfqqxuZUCnJSK3+MXmPNIyE6ZbWh2IMqE241rYiqJxyMiZ6OW/JmZQ5stwEULTy" crossorigin="anonymous"></script>
+
+</html>
\ No newline at end of file
diff --git a/views/profile.handlebars b/views/profile.handlebars
new file mode 100644
index 00000000..ba6fa49a
--- /dev/null
+++ b/views/profile.handlebars
@@ -0,0 +1,28 @@
+<div class="card mt-5">
+  <div class="row ">
+    <div class="col-md-4 d-flex justify-content-center">
+      <img class="card-img-top m-2 " src="{{user.image}}" style="width: 180px;border-radius: 50%">
+    </div>
+    <div class="card-body col-md-8">
+      <h5 class="card-title">{{user.name}}</h5>
+      <p class="card-text">{{user.email}}</p>
+      <p>{{count user.Comments}}已評論餐廳</p>
+      <a href="/users/{{user.id}}/edit" class="btn btn-primary">edit</a>
+    </div>
+    <hr>
+  </div>
+</div>
+<br />
+<div class="card">
+  <div class="card-header">
+    {{count user.Comments}}已評論餐廳
+  </div>
+  <div class="card-body">
+    {{#each user.Comments}}
+    <a href="/restaurants/{{this.Restaurant.id}}">
+      <img src="{{this.Restaurant.image}}" style="width: 100px;">
+    </a>
+    {{/each}}
+  </div>
+</div>
+<br />
\ No newline at end of file
diff --git a/views/restaurant.handlebars b/views/restaurant.handlebars
new file mode 100644
index 00000000..7e311e5a
--- /dev/null
+++ b/views/restaurant.handlebars
@@ -0,0 +1,48 @@
+<div class="row">
+  <div class="col-md-12">
+    <h1>{{restaurant.name}}</h1>
+    <p>[{{restaurant.Category.name}}]</p>
+  </div>
+  <div class="col-md-4">
+    <img class="img-responsive center-block" src="{{restaurant.image}}" style="width: 250px;margin-bottom: 25px;">
+    <div class="well">
+      <ul class="list-unstyled">
+        <li><strong>Opening Hour:</strong> {{restaurant.opening_hours}}</li>
+        <li><strong>Tel:</strong> {{restaurant.tel}}</li>
+        <li><strong>Address:</strong> {{restaurant.address}}</li>
+      </ul>
+    </div>
+  </div>
+  <div class="col-md-8">
+    <p>{{restaurant.description}}</p>
+    <a href="/restaurants/{{restaurant.id}}/dashboard" class="btn btn-primary">Dashboard</a>
+  </div>
+  <hr>
+</div>
+<br />
+<br />
+
+<h3>所有評論：</h3>
+{{#each restaurant.Comments}}
+  {{#if ../user.isAdmin}}
+  <form action="/comments/{{this.id}}?_method=DELETE" method="POST" style="float: right;">
+    <button type="submit" class="btn btn-danger">Delete</button>
+  </form>
+  {{/if}}
+  <blockquote class="blockquote mb-0">
+    <h4><a href="/users/{{this.User.id}}">{{this.User.name}}</a></h4>
+    <p>{{this.text}}</p>
+    <footer class="blockquote-footer">{{moment this.createdAt}}</footer>
+  </blockquote>
+  <hr />
+{{/each}}
+
+<form action="/comments" method="POST">
+  <div class="form-group">
+    <label for="text">留下評論：</label>
+    <textarea class="form-control" id="text" name="text" rows="3"></textarea>
+  </div>
+  <input type="hidden" name="restaurantId" value="{{restaurant.id}}" />
+  <button type="submit" class="btn btn-primary">Submit</button>
+</form>
+<a href="javascript:history.back()">回上一頁</a>
\ No newline at end of file
diff --git a/views/restaurants.handlebars b/views/restaurants.handlebars
new file mode 100644
index 00000000..12b9f454
--- /dev/null
+++ b/views/restaurants.handlebars
@@ -0,0 +1,66 @@
+<ul class="nav nav-tabs">
+  <li class="nav-item">
+    <a class="nav-link active" href="#">首頁</a>
+  </li>
+  <li class="nav-item">
+    <a class="nav-link" href="/restaurants/feeds">最新動態</a>
+  </li>
+</ul>
+<br />
+
+
+<ul class="nav nav-pills">
+  <li class="nav-item">
+    <a class="nav-link {{#ifCond '' categoryId}}active{{/ifCond}}" href="?categoryId=">全部</a>
+  </li>
+  {{#each categories}}
+  <li class="nav-item">
+    <a class="nav-link {{#ifCond this.id ../categoryId}}active{{/ifCond}}"
+      href="?categoryId={{this.id}}">{{this.name}}</a>
+  </li>
+  {{/each}}
+</ul>
+<br />
+
+<div class="row">
+  {{#each restaurants}}
+  <div class="col-md-4">
+    <div class="card mb-4 shadow-sm">
+      <img class="card-img-top" src="{{this.image}}" alt="Card image cap" width="286px" height="180px">
+      <div class="card-body">
+        <p class="card-text">
+          <a href="/restaurants/{{this.id}}">
+            {{this.name}}
+          </a>
+        </p>
+        <span class="badge badge-secondary">{{this.categoryName}}</span>
+        <p class="card-text">{{this.description}}</p>
+      </div>
+    </div>
+  </div>
+  {{/each}}
+</div>
+<br />
+<br />
+
+<nav aria-label="Page navigation example">
+  <ul class="pagination">
+    <li class="page-item">
+      <a class="page-link" href="/restaurants?page={{prev}}&categoryId={{categoryId}}" aria-label="Previous">
+        <span aria-hidden="true">&laquo;</span>
+      </a>
+    </li>
+    {{#each totalPage}}
+    {{#ifCond this ../page}}
+    <li class="page-item active"><a class="page-link" href="#">{{this}}</a></li>
+    {{else}}
+    <li class="page-item"><a class="page-link"
+        href="/restaurants?page={{this}}&categoryId={{../categoryId}}">{{this}}</a></li>
+    {{/ifCond}}
+    {{/each}}
+    <a class="page-link" href="/restaurants?page={{next}}&categoryId={{categoryId}}" aria-label="Next">
+      <span aria-hidden="true">&raquo;</span>
+    </a>
+    </li>
+  </ul>
+</nav>
\ No newline at end of file
diff --git a/views/signin.handlebars b/views/signin.handlebars
new file mode 100644
index 00000000..cd17904d
--- /dev/null
+++ b/views/signin.handlebars
@@ -0,0 +1,19 @@
+<form class="form-signin" action="/signin" method="POST" style="width: 100%;">
+  <div class="text-center mb-4">
+    <h1 class="h3 mb-3 font-weight-normal">Sign In</h1>
+  </div>
+  <div class="form-label-group">
+    <label for="inputEmail">Email</label>
+    <input type="text" name="email" class="form-control" placeholder="Email" required autofocus>
+  </div>
+  <div class="form-label-group">
+    <label for="inputPassword">Password</label>
+    <input type="password" name="password" class="form-control" placeholder="Password" required>
+  </div>
+  <br />
+  <button class="btn btn-lg btn-primary btn-block" type="submit">Submit</button>
+  <div class="text-center mb-4">
+    <p><a href="/signup">Sign Up</a></p>
+  </div>
+  <p class="mt-5 mb-3 text-muted text-center">© 2017-2018</p>
+</form>
\ No newline at end of file
diff --git a/views/signup.handlebars b/views/signup.handlebars
new file mode 100644
index 00000000..37ccf4f5
--- /dev/null
+++ b/views/signup.handlebars
@@ -0,0 +1,27 @@
+<form class="form-signin" action="/signup" method="POST" style="width: 100%;">
+  <div class="text-center mb-4">
+    <h1 class="h3 mb-3 font-weight-normal">Sign Up</h1>
+  </div>
+  <div class="form-label-group">
+    <label for="inputName">Name</label>
+    <input type="text" name="name" class="form-control" placeholder="Name" required autofocus>
+  </div>
+  <div class="form-label-group">
+    <label for="inputEmail">Email</label>
+    <input type="text" name="email" class="form-control" placeholder="Email" required autofocus>
+  </div>
+  <div class="form-label-group">
+    <label for="inputPassword">Password</label>
+    <input type="password" name="password" class="form-control" placeholder="Password" required>
+  </div>
+  <div class="form-label-group">
+    <label for="inputPasswordCheck">Password Check</label>
+    <input type="password" name="passwordCheck" class="form-control" placeholder="Password Check" required>
+  </div>
+  <br />
+  <button class="btn btn-lg btn-primary btn-block" type="submit">Submit</button>
+  <div class="text-center mb-4">
+    <p><a href="/signin">Sign In</a></p>
+  </div>
+  <p class="mt-5 mb-3 text-muted text-center">© 2017-2018</p>
+</form>
\ No newline at end of file