require not import

lib/permissions.js

@@ -1,4 +1,4 @@
-import { User } from '../models'
+let { User } = require('../models')
 
 //`req` is the request object
 //`permissions` is an array of strings: