passportjs, bcrypt, https commented out