Authorization solution for node.js?

I need to have users log in and create accounts. I would also like admin users to log in to a backend and make changes to the site. I know express middleware can handle protecting routes but don't feel like building a custom solution with jwt or passport.

How do you deal with authorization in your node.js apps?

(Please note that authorization is about having leveled or tiered access, where authentication is making sure people are who they say they are -- not the same thing)