Simple, unobtrusive authentication for Node.js