fn router(secret: String, static_folder: PathBuf) -> Router {
    // initialise the Users k/v store and allow the static files to be served
    let users = Users::default();

    // make an admin route for kicking users
    let admin = Router::new()
    .route("/disconnect/:user_id", get(disconnect_user))
    .layer(RequireAuthorizationLayer::bearer(&secret));

    let static_assets = SpaRouter::new("/", static_folder) .index_file("index.html").handle_error(handle_error);

    // return a new router and nest the admin route into the websocket route
     Router::new()
        .route("/ws", get(ws_handler))
        .nest("/admin", admin)
        .layer(Extension(users))
        .merge(static_assets)
}