gistfile1.js

//in main app.js
var auth = require('./lib/auth');
//...

app.use(auth.checkPermissions());

//in lib/auth.js
exports.checkPermissions = function() {
  return function checkPermissions(err, req, res, next) {
//sometimes this simply never kicks in,
//when it does req.route is not defined
  };
}