chore(app.js): update to new auth structure (remove noLoginRequired)