Use 2 middlewares and remove the notLoggedIn function.
Fix req.authenticated and add the random secret.
Update README