fix wrong path
set passport middlewares
add test to security middlewares