Updated express code, move simple auth into week 11