Refactor: Move invalidateUser into auth

That's where it wants to be.
Refactor: Clean up beginning of app.js

Remove the obvious comments at the start
of the app, make some of the configuration
code more concise.