rewound app.js to remove Auth0's influence