Add passport and password-hash to package.json