Yeah, it should be there in the after event as the last argument (docs
below). But that doesn't look right -- there's no response in your
audit record; maybe you didn't actually send it?
Event: 'after'
function (request, response, route, error) {}
Emitted after a route has finished all the handlers you registered.
You can use this to write audit logs, etc. The route parameter will be
the Route object that ran. Note that when you are using the default
404/405/BadVersion handlers, this event will still be fired, but route
will be null. If you have registered your own listeners for those,
this event will not be fired unless you invoke the cb argument that is
provided with them.