Pass in app instead of create.

Make auth app unaware of port.
Modify the app passed in and let others create the server.