Authorization plumbing for NodeJS/ExpressJS/ConnectJS apps