fixed old auth demo by placing in index.js temporarily

next step, will move into a service/controller