updated to express 4, broke out auth code to ./server/auth.js, removed some modules