delete password from session in local passport strategy