Upgrade express
Refactor authentication to use constants