Why is my Express.js behaving inconsitently when using auth middleware?

Question

I have an Express.js backend server that serves a public login page and my private react app.

My problem is an inconsistent behaviour of my express server for authent