correct some imprecision in the configuration
refactor and comment out not working part
start working on AUTH/passport + flatten json response + include bcrypt