Simple authentication plumbing and middleware for Node/Express apps