set wasmodified to true if missing req.query._v

src/controllers/auth.js

@@ -37,7 +37,8 @@ api.auth = function(req, res, next) {
     if (_.isEmpty(user)) {
       return res.json(401, NO_USER_FOUND);
     }
-    res.locals.wasModified = +user._v !== +req.query._v;
+
+    res.locals.wasModified = (req.query._v ? +user._v !== +req.query._v : true);
     res.locals.user = user;
     req.session.userId = user._id;
     return next();