Will this still be needed if we use the `req.user` object to transport authentication information?