Use 'passport' for user authentication.