modified:   routes.js ensureAuth for /data/*