support for req.auth. fixes #204
v0.39.0