augustl: just have something like app.use(ignore('/foo', authThingy()))