cleaned auth code, changed express version from 3.2.0 to 3.x