dont' re-setup passport inside middleware