Article understanding passportjs authentication flow.