changed koa to express and enabled authentication