moved passport strategy to services/passport.js