#28 moving authentication checks (for local vars) from an express middleware to the render method
#28 including generic /logout method
#28 using options for the 'authenticated' flag