fix(express) if username or password is change, auth do not work