Perhaps a little easier to maintain would be to have an array of path's that don't require authentication.

i.e.

```
var noAuthNeeded = ['path1', 'path2']

if (noAuthNeeded.indexOf(req.path) > -1) {}
```