add auth module to express