Update app.js

Before removing the ```()``` from ```pass.ensureAdmin``` I couldn't start the app due to ```TypeError: Cannot read property 'user' of undefined```.