trying to add authentication... using passport