meta: requiresAuth: true allowedRoles: ['patient']