Moved auth layer below bodyParser()... need to find an alt...