refactor token auth using passport module bearerStrategy