Patch for router

Let's authenticate on the right req.originalUrl if possible.
which version of express introduced that, are we becoming incompatible with releases previous this change?