Basic user authentication middleware for Express