Also, you could just require() express again for the basic auth stuff