Confusing documentation in passportjs.org/guide about passport HOT 2 CLOSED

function checkAuth(req,res,next){
    if(req.user) next();//Forward the request so it can be handled by your router
    else res.send(403);//send access denied
}

app.configure(function() {
  app.use(express.cookieParser());
  app.use(express.bodyParser());
  app.use(express.session({ secret: 'keyboard cat' }));
  app.use(passport.initialize());
  app.use(passport.session());
  app.use(app.router);
  app.use(express.static(__dirname + '/../../public'));
});

app.get('/login',function(req,res){
    //Serve your login page here
});
app.post('/login', 
  passport.authenticate('local'),
  function(req, res) {
    // If this function gets called, authentication was successful.
    // `req.user` property contains the authenticated user.
});

app.all('*', checkAuth);

//Serve any other pages here:

app.get('/secure', function(req,res){
  res.json(req.user);
});