Hi, lovely work btw but I can't seem to find how you are using the validator.js file. I felt it'd be used in the controllers to sanitize and validate the req.body but I can't find you requiring the script anywhere there.
Also, why is there a {role: basic} on the register controller where you created a new User? I ask because I cannot find a role field in the User document. I don't know if it is an express thing because I'm using Koa to build something similar to this.