Update npm packages to latest
Don't call next() from /auth route

Fixes another occurrence of "Error: Can't set headers after they are
sent"