remove req.auth
add @jonathanong and @defunctzombie as contributors