added config for passport and mongoose and added bower for client deps.  mild refactors throughout