#3 - checkAuth started

It will *eventually* be the auth function for all routes that need
authorization.

But Node doesn't do sessions by default, which makes things
complicated...