Boilerplate authentication using ExpressJS 3