remove req.user altering. changed isAuthenticated method to use the passport one.
left only the locals variables. but i would change them to be not use but role or something
removed failing tests, they need to be rewritten