requireAuthentication function

app.all works for group of routes (middleware)
it is special route
in code, it has to be earlier than other routes from group