```coffeescript
_ = require('underscore')

module.exports = (req, res, next) ->
  httpVerbWhitelist = ['GET']

  return next() if process.env.NODE_ENV == 'test'
  return next() if req.isAuthenticated() or _.contains(httpVerbWhitelist, req.method)

  return res.send(401, 'Unauthorised')
```

Define verbs outside of method so that they're not initiliased for every request
user
```coffeescript
_ = require('underscore')

httpVerbWhitelist = ['GET']

module.exports = (req, res, next) ->
  return next() if process.env.NODE_ENV == 'test'
  return next() if req.isAuthenticated() or _.contains(httpVerbWhitelist, req.method)

  return res.send(401, 'Unauthorised')
```
assistant