Spike: Use express constructs / enable express shimming for Authentication

[deepakrkris]

• Use of passport-strategy's with dependence on Express request, response constructs
  Confirm:
  • request.session
  • response.json
  • response.send
  • response.type
• Shim/inject express dependencies without using express request/response/middleware

[superkhau]

@deepakrkris I'm guessing this is already done as part of your work on the Auth package impl. Safe to close?

[bajtos]

This may be required for #230 and/or #160.

[bajtos]

We need to revisit the goal of this story, considering that we are going to use Express REquest/Response types internally soon.