change app.js add auth.js