Simple, expressive, white-list authorization for express.js