Remove odd whitespace
Move the /auth route
Remove old CORS code
Implement password checking