fix versions in package.json
fix session-mongo
do not init passport.js w/o credentials
prettify programmatic loader file
bump version