Handle auth directly due to express 4.0