log auth
migration to express 4