Removed old authenticated/authorized code. Relying on express middleware to set session cookie.