Extracted auth code from app.js into its own file auth-setup.js