updates server.js to use requireAuth