```js
res.json(401, message || "Unauthorized");
```

So you can get rid of the first two statements in the body function.