fixed more paths (app->client)
fixed passport version
fixed npm version requirements