put the auth function in app.js, so inside routes you can call app.auth to add the auth middleware to any route call