in the middle of passport.js