Auth needs express too