using res.locals for request scoped locals