A more long-term failsafethat redirects the user to the main page if not logged in, refactor passport VARS to config