keymaster() out of sync with external router

[avoidwork]

The keymaster() middleware is referencing the explicit routes in the server config, which is no longer in sync with the external router.

function keymaster (req, res, next) {
	const obj = req.server.tenso,
		authd = req.session !== void 0 && req.isAuthenticated();

	// No authentication, or it's already happened
	if (!req.protect || !req.protectAsync || authd) {
		const method = regex.get_rewrite.test(req.method) ? "get" : req.method.toLowerCase(),
			routes = req.server.config.routes[method] || {}, // <-- this is the issue

[avoidwork]

This was not the issue; pebkac? ... auth route was not explicitly protected by config.