seneca auth for working with express and using CORS auth see drmg.angular.mvp for client code