concerns crammed in:4
handleSignup() — four concerns in one function
handleSignup(req)
One part, one concern. Separate the blob, then click a lane to see what a change to that concern now touches — just that lane.