add passport middleware into app